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“My  PowerBook  G4  is  now  running  every  major 
UNIX  app  that  we  had  on  our  Suns,  AlphaStations 
and  SGIs  -  and  running  them  faster.” 

- Marks .  Cohen,  Ph.D.,  Professor, 

UCLA  Brain  Mapping  Center 

“This  new  OS  has  accomplished  in  a  short  period  of 
time  what  others  have  struggled  to  do  for  years;  bring  a 
compelling,  widely  accepted  GUI  (called  Aqua)  to  UNIX.” 

-Tim  O’Reilly,  OReilly Network 

“After  two-and-a-half  years  of  Linux,  I’ve  finally  found 
joy  in  a  UNIX  operating  system.  And  I  found  it  when  I 
purchased  a  Macintosh -the  first  one  I’ve  ever  owned.” 

-John  Hummel,  Jr,  The  Gamers’ Press 

“Until  Mac  OS  X  came  along,  I  had  three  machines  on 
my  desk.  Now  with  Mac  OS  X,  I  use  one  computer  for 
writing,  coding,  research,  everything.” 

-Dr.  Michael  Cherry,  Associate  Professor, 

Department  of  Genetics,  Stanford  University 
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boxes  to  /dev/null. 


OS  X  has  all  the  power  you  expect  from  a  UNIX 
box,  but  none  of  the  hassle  associated  with  basic 
UNIX  system  administration.  You  can  expect 
things  to  work  and  they  do.” 

-Jim  Hourihan,  Tweak  Films 

The  keys  to  OS  X  are  that  it’s  UNIX  inside  and  Mac 
outside.  This  combination  of  stability,  support  for 
industry  standards,  and  wide  developer  support 
coupled  with  Apple’s  Aqua  graphical  user  interface 
and  emphasis  on  graphic  performance  makes 
this  a  truly  great  operating  system.” 

-David  Coursey,  ZDNet Anchor Desk 

We’re  old  hardcore  UNIX  hackers,  so  a  BSD-based 
system  is  mother’s  milk.  Everything  you  expect  to 
be  there  is  there,  and  it  works  right.” 

-Dave  Weininger,  President,  Daylight  Chemical 
Information  Systems,  Inc. 


or  more  information,  call  I-flOO-Afl'-APPLE  or  visit  u  u  u .  apftte.  com/ macosx. 


. 


W'-r. 


IBM  TotalStorage,  the  e-business  logo  and  e-business  is  the  game.  Play  to  win  are  either  registered  trademarks  or  trademarks  of  International  Business  Machines  Corporation  ir 
the  United  States  and  all  other  countries.  Other  company,  product  and  service  names  may  be  trademarks  or  service  marks  of  others.  ©  2002  IBM  Corp.  All  rights  reserved 


Storage  in  every  size  and  width. 


The  difference  between  winning  and  losing  is  a 
little  thing  called  “storage”  And  the  winning  play 
is  integrated  storage  solutions.  Why?  Hardware 
and  software  that  fit  and  work  together  speed 
implementation.  They  allow  you  to  maximize  your 
current  infrastructure  investments  and  help  reduce 
risk.  IBM  Total  Storage™  solutions  are  complete, 
cross-platform  storage  offerings  that  cover  storage 
networking,  disk,  tape,  software  and  services.  For 
example,  IBM  NAS  gives  you  amazingly  scalable 
data  storage  that  fits  into  just  about  any  LAN -fast. 
IBM  FAStT  offers  some  of  the  highest  performance, 
most  affordable  midrange  disk  storage  available 
today.  Are  you  bent  on  winning?  You  can  test-drive 
any  IBM  storage  solution  at  one  of  over  140  IBM 
TotalStorage  Solution  Centers.  Find  out  where,  at 
ibm.com/totalstorage/solutions 


Technology  creates  a  false  sense  of  security.  Packaged  solutions  have 
done  little  more  than  plug  yesterday's  holes.  This  is  the  problem  with 


information  security  today, 


The  more 
vulnerable 


com 


secure  we  are,  the  more 
we  become. 

How  can  a  solution  built  to  solve  yesterday's  problem  be  expected  to  anticipate  what  is  to  come 
tomorrow?  Solutions,  in  and  of  their  very  nature,  are  passive.  They  cannot  learn  and  adapt. 
Solutions  on  top  of  solutions  are  no  more  than  static  layers  designed  to  surround  and  contain 
an  ever-changing  object  —  information. 

Like  information,  security  must  continue  to  evolve.  Intuitive  Information  Security  combines 
human  intuition  and  adaptive  technology  to  deliver  intelligent  strategies.  It  is  immediate 
knowledge  deployed  by  tools  able  to  understand  how  and  where  information  is  to  be  secured 
across  the  entire  network.  Automatically.  And  only  by  anticipating  change  can  we  become  secure. 


c  2002  Trend  Micro  Incorporated.  All  rights  reserved  Trend  Micro  Inc.  and  the  T  ball  logo  are  trademarks  of  Trend  Micro  Inc 
and  registered  in  certain  jurisdictions  All  other  brand  and  product  names  are  the  registered  trademarks  of  their  companies 


Cover  Story 

ERP  I  62 


Nestle’s  ERP 
Odyssey 

Nestle  USA’s  costly  and  protracted  struggle  with  its 
SAP  project  is  a  cautionary  tale  for  any  company 
intent  on  an  enterprisewide  implementation. 

By  Ben  Wortben 


Jeri  Dunn,  Nestle 
USA's  CIO,  is  candid 
about  the  lessons  her 
team  learned  during  its 
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Features 


SECURITY  STAFFING 

How  to  Staff  Up  for  Security  I  74 

It  doesn’t  matter  whether  you  find  them  within  your  company 
or  beyond  its  walls.  But  you  have  to  find  them. 

By  Eric  Berkman 


I.T.  VALUE 

How  to  Use  the  Balanced  Scorecard  I  93 

You  can’t  tell  when  you’re  winning  if  you  don’t  keep  score.  The 
Balanced  Scorecard  helps  track  your  hits  and  misses. 

By  Eric  Berkman 


LEADERSHIP 
Room  for  Two  I  82 

It’s  one  company  but  two  cultures.  Marriott  and  the  Ritz-Carlton 
work  to  align  different  approaches  with  common  goals. 

By  Scott  Berinato 


DATA  STORAGE 
What  Elephant?  I  102 

Storage  is  already  as  big  as  an  elephant  and  getting  bigger.  It’s  time 
to  stop  ignoring  it  and  start  strategizing  how  you’re  going  to  deal 
with  it.  By  Carol  Elildebrand 


“Good  security  equals 
prevention,  detection  and 
reaction,”  says  David  Saul, 
executive  VP  and  CIO  of 
Zurich  North  America.  “If 
you’re  not  going  to  staff  to 
make  the  process  work, 
your  exposure  to  security 
breaches  is  higher."  74 


BOOK  EXCERPT 

It  Takes  a  Community  I  111 

Informal  groups  known  as  communities  of  practice  are  the  latest 
technique  for  getting  employees  to  share  what  they  know.  Here  are 
seven  ways  to  encourage  such  communities  in  your  company. 

By  Etienne  Wenger,  Richard  McDermott  and  William  M.  Snyder 
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YOU'RE  PROTECTED  AGAINST  HACKERS,  VIRUSES  AND  WORMS. 

BUT  WHAT  ABOUT  ROSE  IN  BENEFITS? 

eTrust"  Security  Solutions 

Complete  protection  for  your  entire  enterprise. 

When  it  comes  to  protecting  your  business,  you  need  security  that  can  protect  your 
enterprise  from  potential  threats,  no  matter  where  they  may  come  from.  That's  exactly 
what  eTrust  does.  Our  family  of  products  allows  you  to  not  only  safeguard  your  entire 
enterprise,  but  also  view  and  manage  that  security  either  centrally  or  from  multiple 
delegated  locations.  So  you  can  continue  to  grow  and  maximize  new  opportunities 
while  minimizing  your  risk.  And  that's  security  you  can  feel  secure  about. 


Computer  Associates™ 


HELLO  TOMORROW 


WE  ARE  COMPUTER  ASSOCIATES  THE  SOFTWARE  THAT  MANAGES  eBUSINESS 


TM 


ca.com/etrust 


©2001  Computer  Associates  International,  Inc.  (CA).  All  trademarks,  trade  names,  service  marks,  and  logos  referenced  herein  belong  to  their  respective  companies. 


Columns 


NET  GAINS 

Putting  the  Horse  First  I  38 

B2B  exchanges  failed  because  they 
got  their  business  models  backward. 

By  Mobanbir  Sawhney 

PEER  TO  PEER 
Treadmill  to  Nowhere  I  44 

Are  you  too  busy  to  take  a  summer 
vacation?  If  so,  it’s  time  to  figure  out 
what  you’re  doing  wrong. 

By  George  Tomko 

Sections 

TRENDLINES  I  22 

Animation  databases  speed  moviemaking; 
Virtual  virtuosos;  The  perfect  taste-tester; 
Homework  that  pays.  And  more 

WASHINGTON  WATCH  I  26 

A  bridge  between  public  and  private  IT 

OFF  THE  SHELF  I  32 

Primal  Leadership  and  When  Generations 
Collide;  CIO  Best-Sellers 


HOTSEAT I  50 

Your  Guide 
to  Managing 

Toy  Story 

Mattel  CIO  Joe  Eckroth  has  used  a  tough 
but  tender  management  style  to  help  lead 
the  toy  maker’s  turnaround. 

By  Stephanie  Overby 

Management  Briefs  I  54 

What  to  do  when  employees  need  some 
assistance. 

Leadership  Agenda  I  56 

A  crash  course  in  strategic  planning  and  the 
how  and  why  of  a  strategy  workout. 

By  Susan  H.  Gramm 


Mattel  CIO  Joe  Eckroth  has  brought  discipline  and 
GE  management  methods  to  the  troubled  Mattel 
toy  company.  50 


EMERGING  TECHNOLOGY  I  116 

Enterprise  portals  can  help  employees  do 
their  job  better — if  you  do  them  right. 

By  Lauren  Gibbons  Paul 

COOL  PRODUCT  I  118 

A  new  trio  of  data  entry  products  for 
portable  devices. 

UNDER  DEVELOPMENT  I  122 

Squeezing  3-D  graphics  for  less  wait. 

PUNDITS  !  124 

When  it  comes  to  wireless  technologies, 
can  you  settle  for  a  base  hit? 


In  Every  Issue 

FROM  THE  EDITOR 
Turning  Point  I  15 

The  new  and  improved  CIO. 

By  Abbie  Lundberg 

INBOX  I  16 

Reader  feedback 

INDEX  I  126 

EXECUTIVE  SUMMARY  I  128 

Abstracts  of  all  the  feature  stories  found 
in  this  issue. 


“After  recovering  from  the  shock  of  not  having  to 
worry  about  every  operational  issue,  I  was  ready 
to  move  on  and  be  part  of  something  more 
relevant— making  the  company  a  success.” 

-George  Tomko,  CIO  of  Astaris,  on  reestablishing  your  role  Page  44 
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Oracle9/  Application  Server 


The  world's  most  successful  companies 
run  Oracle9/  Application  Server. 


oracle.com/ad/9iAS 
or  call  1.800.633.1072 


Copyright  ©2001-2002  Oracle  Corporation.  All  rights  reserved.  Oracle  is  a  registered  trademark  of  Oracle  Corporation 
Other  names  may  be  trademarks  of  their  respective  owners. 


m 


IT  v»iu* 


nections 


-  „  f ‘■CXSfSSf 
•»,  91  -wtw  S  r*** 

sk»*  iaaa#%!s«% 

'•«  &,»...•  Vk-  .'  '!'*w  PA., 


^  a,'lr'i!  it?. 

saaSpsgs^  sssS^S? 
sStSassS? 


—WTbr. 


t  ''  h  'Jfj/  0^"'  «>*»*., 

'"  J,iJW.fc,., 


ASK  THE  SOURCE 

How  can  the  Balanced 
Scorecard  work  in  the 
IT  department? 

Have  a  few  questions  about  How  to 
Use  the  Balanced  Scorecard  (Page  93)? 

Go  to  the  source:  David  Norton,  cocreator  of  the 
Scorecard,  is  online  to  answer  your  questions. 

WEIGH  IN 

Share  your  lessons  in  enterprise  implementation 

Nestle’s  ERP  Odyssey  (Page  62)  details  the  wrong  turns  and  missteps  that  a 
company  can  take  in  the  pursuit  of  the  ultimate  enterprisewide  solution.  Have  all 
your  implementations  gone  flawlessly?  Share  what  you’ve  learned. 

ASK  THE  AUTHOR 

How  can  a  community  come  alive? 

In  It  Takes  a  Community  (Page  111),  knowledge  management  expert  Etienne 
Wenger  offers  seven  principles  for  cultivating  informal  groups.  Ask  him  and  his 
coauthors  about  getting  a  knowledge  community  off  the  ground. 

Find  links  for  the  stories  mentioned  above  in  the  Web  Connections  box  at  www.cio.com. 

Print  Links  Looking  for  articles  referred  to  in  this  or  past  issues  of  CIO ?  Look  no 
further  than  Print  Links  (www.cio.com/printlinks). 


Peer  Resources 

The  Darwinmag  Connection 

CIO's  online  sister  publication, 
Darwinmag.com,  explains 
technology  for  the  nontechnol¬ 
ogy  executive.  E-mail  copies  of 
the  following  Darwinmag.com 
stories  related  to  this  issue’s 
features  to  your  colleagues.  Go 
to  www.cio.com/printlinks. 

Storage:  What  Elephant? 

(Page  102):  Your  colleagues 
don’t  need  to  get  bogged  down 
in  NAS,  SANs  and  SRM.  But  they 
do  need  to  know  why  storage  is 
taking  up  so  much  space  and 
money.  They’ll  find  the  answers 
in  Darwinmag. corn's  Why 
Squirrels  Manage  Storage 
Better  than  You  Do. 

How  to  Staff  Up  for  Security 

(Page  74):  If  your  peers  haven't 
yet  woken  up  to  the  clarion  call 
of  security,  e-mail  them  a  copy 
of  Darwinmag. corn’s  Test  Your 
Defenses,  which  chronicles  a 
self-inflicted  security  audit. 

And  check  out  Glossary,  a 
layman’s  guide  to  geek  speak 
only  on  Darwinmag.com. 


Reader  Poll 

Are  today’s  B2B  exchanges 
doomed  to  fail? 

Our  Net  Gains  columnist  (Page  38) 
claims  that  B2B  exchanges  got  it  all 
backward  by  building  marketplaces 
with  no  customers.  There  is  hope— 
but  not  in  the  direction  most  B2B 
companies  first  conceived.  Go  to 
www.cio.com/printlinks. 


Our  Daily  Web 

Monday  Tech  Tact 

Technology  Editor 
Christopher  Lindquist  covers 
what’s  comingand  why  you 
should  know  about  it. 

Tuesday  Quick  Poll 

Read  what  CIOs  think  about 
current  IT  issues,  and  tell  us 
how  you  feel. 


Wednesday  Metrics 

Web  Writer  Jon  Surmacz 
makes  sense  of  the  numbers. 

THURSDAY  Sound  Off 

Editors  offer  opinions  on 
managerial,  political  and 
ethical  dilemmas. 

Friday  The  Big  Picture 

Charts  and  graphs  that  are 
worth  1,000  words. 
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Choose  your  route  wisely  and  transform  your  entire  business.  Web  services  are  more  than 
simply  putting  your  applications  on  the  Web.  There  is  a  bigger  financial  opportunity  out 
there.  A  road  that  uses  open  standards  to  create  Web  services  that  can  transform  even  the 
biggest,  most  complex  enterprise  business  processes.  Sun™ONE  is,  quite  simply,  the  difference 


v 


Now  might  be 
a  good  time  to  ask 
for  directions. 
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between  realizing  marginal  cost  savings  and  maximum  ROI.  Sun's  technology  is  ready  to 
adapt  and  scale  with  your  needs  over  the  long  haul.  Perhaps  more  important,  this  road  is 
already  paved.  The  products,  services  and  partners  of  Sun  ONE  are  ready 


SunONE 


to  start  you  down  the  road  today.  You  grab  the  snacks.  We've  got  the  map.  Open  Net  Environment 
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Make  the  net  work  with  Web  services 
that  can  transform  your  business: 

Transformative  change  begins 
with  Java '  technology. 

At  the  enterprise  level,  lava”  technology  and  XML  mean 
interoperability.  Sun”  ONE  capitalizes  on  seven  years  of 
java  leadership  to  provide  a  platform  for  Web  services 
that  leverages  your  existing  systems.  And  since  78% 
of  developers  view  )2EE”  server  software  as  the  most 
effective  platform  for  building  and  deploying  Web  services, 
you  can  be  sure  Sun  ONE  will  get  you  started  down  the 
road  in  the  right  direction. 

The  Solaris”  Operating  Environment  lets  you  deploy 
services  on  an  enterprise-class  platform. 

Make  sure  your  services  are  always  available  for  your 
customers,  with  the  rock-solid  Solaris”  Operating 
Environment.  You'll  be  in  good  company —  after  all, 
many  of  the  largest  Internet  businesses  already  run  on 
it.  Solaris  OE  is  the  foundation  of  Sun  ONE  and  provides 
a  highly  reliable  application  platform  for  any  kind  of 
service.  That’s  what  we  call  “Services  on  Demand.” 


Sun  ONE  infrastructure  software 
delivers  services  today. 

Sun  ONE  Directory  Server  already  enables  60%  of  the 
Fortune  100  to  conduct  business  on  the  Web  quickly 
and  securely.  And  Sun  ONE  Developer  Tools  for  lava 
were  judged  Best  java  IDE  by  javaWorld.  They  both 
work  seamlessly  with  Sun  ONE  Application  Server  and 
Sun  ONE  Portal  Server  to  let  you  deliver  services  that 
quickly  scale  across  multiple  platforms.  The  faster  you 
get  your  Web  services  to  market,  the  greater  the  busi¬ 
ness  opportunity.  There’s  no  speed  limit  on  this  road. 

Sun  ONE  Consulting  can  start  you  down 
the  road  to  Web  services  right  now. 

Sun  ONE  Consulting  lets  you  reduce  the  time,  cost  and 
risk  of  transforming  your  business  with  Web  services. 
Sun  ONE  Consulting  can  help  you  with  every  phase  of 
developing  and  deploying  innovative  services,  giving 
you  the  kinds  of  sustained  business  advantages  you 
would  expect  from  a  business  innovator  like  Sun. 


Systems  Integrators: 

Surf-teams  with  some  of  the  best  systems  integrators  in  the  business,  so  you’ll  have  the  expertise  you  need  to  begin 
developing  “Services  on  Demand”  on  the  Sun  ONE  platform  today: 

°  Cap  Gemini  Ernst  &  Young  0  EDS 

°  Computer  Sciences  Corporation  °  KPMG  Consulting,  Inc. 

°  Deloitte  Consulting  0  Science  Applications  International  Corporation 


Companies 
already  on  the  road 
with  Sun™ ONE: 

Standard  &  Poor’s 

The  Sun  ONE  architecture  has  doubled 
Standard  &.  Poor’s  uptime  and  applica¬ 
tion  performance  over  previous  imple¬ 
mentations,  and  has  improved  their 
service  delivery  to  financial  markets 
so  that  they  are  now  able  to  meet 
client  demands  24/7. 

National  Hockey  League® 

With  the  Sun  ONE  framework,  the 
NHL®  is  harnessing  the  power  of  the 
Web  to  improve  operations.  The  NHL 
can  now  communicate  and  conduct 
business  more  securely  while  delivering 
“Services  on  Demand”  to  over  8  million 
passionate  hockey  fans  per  month 
on  NHL.com. 


DELIVER  SERVICES 

•  Sun  ONE  Portal  Server 

•  Sun  ONE  Messaging  Server 

•  Sun  ONE  Calendar  Server 

The  fastest  road  to  providing 
prepackaged  and 
custom-developed 
services. 


CREATE  NEW  SERVICES  t 

•  Sun  ONE  Developer  Tools  I 

•  Sun  ONE  Application  Server  * 

•  Sun  ONE  Integration  Server 

The  fastest  road  to  maximizing 
productivity  and  the  speed  of  i 
development. 


IDENTITY  AND  SECURITY 

•  Sun  ONE  Directory  Server 

•  Sun  ONE  Identity  Server 

The  fastest  road  to  leveraging  and 
protecting  your  corporate  assets. 


The  road  to 
Web  services 
begins  with 
Sun  ONE. 


DEPLOY  SERVICES 
•  Solaris  Operating  Environment 

The  fastest  road  to  deploying 
i  Java  and  XML-based  services 
quickly  and  reliably. 


Java 


NEED  DIRECTIONS? 
REGISTER  TODAY 

for  our  exclusive 
Web  seminar  on  the 
importance  of 
open  standards  in 
Web  services. 
www.sun.com/stayopen 
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Turning  Point 


ALMOST  15  YEARS  AGO,  when  we  created  CIO 
magazine,  there  weren’t  a  whole  lot  of  chief  infor¬ 
mation  officers  out  there.  The  most  prevalent  titles 
were  vice  president  and  director  of  MIS.  These 
executives  generally  had  computer  science  and 
engineering  backgrounds,  and  C/O’ s  mission  was 
to  help  them  learn  the  ways  of  business,  to  cham¬ 
pion  the  position  and  get  CIOs  a  seat  at  the  exec¬ 
utive  table. 

A  few  years  ago,  you  may  have  noticed  a  shift 
in  our  coverage.  We  became  less  booster-ish,  more 
demanding  of  our  sources  and  subjects.  That’s 
because  CIOs  had  arrived — they  were  recognized 
as  critical  to  the  success  of  the  business,  and  they 
were  invited  (if  not  always  completely  welcomed) 
to  the  table  in  significant  numbers.  According  to 
our  “State  of  the  CIO”  research  (see  the  March  1, 
2002,  special  issue),  63  percent  of  CIOs  now  report 
to  their  CEO  or  COO  (51  percent  and  12  percent, 
respectively). 

Still,  during  this  evolution — even  in  the  past  cou¬ 
ple  of  years — I’ve  occasionally  been  frustrated  by 
the  seeming  inability  of  many  CIOs  to  make  the 
position  work,  a  failure  due  either  to  their  own 
stubbornness  or  the  recalcitrance  of  their  organi¬ 


zation,  or  some  unholy  combination  of  the  two. 
C/O’ s  readers  and  sources  (channeled  through  us  at 
the  magazine)  had  identified  the  challenges  and 
described  what  was  needed  to  work  through  them, 
but  a  significant  majority  of  CIOs  still  struggled. 
The  learning  was  still  in  process.  Those  who  were 
successful  were  the  exceptions,  the  pioneers. 

Today,  that  frustration  is  gone.  Two  years  ago, 
CIOs  had  just  arrived;  today  they’re  finally  at  home 
in  the  role.  In  the  past  few  months  I’ve  personally 
met  with  more  than  50  CIOs,  from  companies 
large  and  small,  from  the  private  sector,  govern¬ 
ment  and  nonprofits.  Almost  without  fail,  the  peo¬ 
ple  I’ve  spoken  with  described  their  challenges  as 
business  challenges,  not  IT.  And  their  approaches  to 
handling  those  challenges  were  smart  and  sophis¬ 
ticated.  Not  only  have  they  applied  the  prescrip¬ 
tive  of  best  business  practices,  they  seem  to  have 
internalized  these  approaches — they  know  what 
to  do,  and  they  do  it  with  confidence. 

Having  reached  this  turning  point,  my  question 
is,  What  can  we  do  to  serve  you  now?  Or  maybe  an 
easier  question  to  answer:  Now  that  you  know 
how  to  be  a  good  CIO,  what’s  keeping  you  awake 
these  nights?  I’d  love  to  hear  from  you. 
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I’LL  TAKE  I.T.  SUPPORT  WITH  A  SIDE  OF  RESPECT 

I  couldn’t  agree  more  with  the  need  for  more  empathetic  and  involved  technical 
support  [“Dumb,  but  Not  Insensitive,”  Reality  Bytes,  March  1,  2002].  What  I  find  most 
disconcerting,  however,  is  the  notion  of  a  company  out  there  waiting  to  reward  tech 
chiefs  for  mocking  colleagues  who  are  considered  technologically  inept.  That  smacks 
of  mean-spiritedness.  Upper-level  management  should  be  setting  an  example  of 
professionalism  and  not  benefiting  from  the  humiliation  suffered  by  less  technologically 
talented  individuals. 

Until  I  began  working  with  an  IT  department,  I  had  never  experienced  so  much 
patronizing,  lowest-common-denominator  behavior  toward  others.  While  I  am  sure  that 
not  all  individuals  in  IT  are  boorish  tech  snobs,  sometimes  finding  one  of  those  other 
gems  is  as  elusive  as  acquiring  a  Chia  Pet  the  day  before  Christmas. 

Dave  Overly  •  Business  Analyst  •  RadioShack  Installation  Services 
Columbus,  Ohio  •  david.overly@radioshack.com 


NOT  IN  MY  HOUSE 

I  have  a  fundamentally  different  way 
of  looking  at  the  IT  world  [“The  State 
of  the  CIO,”  March  1,  2002],  I  don’t 
think  that  it  is  the  CIO’s  job  to  justify 
which  projects  a  company  works  on. 
If  it  is  the  CIO’s  job  in  a  company,  then 
you  can  usually  expect  that  IT  is  not 
aligned  with  the  business  strategy. 

Corporate  officers  are  responsible  for 
determining  which  systems  we  should 
be  working  on,  and  it  is  their  responsi¬ 
bility  to  justify  them.  Of  course  IT  plays 
a  significant  role  in  the  long-term  tech¬ 
nology  plan.  The  IT  group  is  responsible 
for  ensuring  that  the  user  departments 
have  a  good  handle  on  what  is  possi¬ 
ble.  Bottom  line,  I  think  it  is  wrong  to 
lay  this  on  the  doorstep  of  IT. 

Paul  M.  Ingevaidson 
SVP  International  and  Technology 
Ace  Hardware 
Oak  Brook,  III. 
inge@memo.acehardware.com 

CYBERSAFETY  FIRST 

I  read  your  article,  “The  Truth  About 
Cyberterrorism”  [March  15,  2002].  I’ve 


always  wondered  why  a  company 
would  compromise  its  mission-critical 
servers  by  exposing  them  on  the  Inter¬ 
net.  Why  wouldn’t  they  simply  keep  that 
information  on  a  separate  network?  I 
understand  that  larger  companies  would 
like  to  use  encrypted  means  in  order  to 
go  from  point  A  to  point  B,  but  what 
many  companies  do  not  realize  is  that 
no  matter  what  encryption  means  they 
use,  there  is  always  a  way  to  break  the 
code.  That  naivete  never  ceases  to  amaze 
me.  I  enjoyed  reading  your  article  and 
look  forward  to  CIO  magazine  placing 
more  of  a  focus  on  those  matters. 

John  Meegan 
CIO 
Major  Tire 
Cincinnati 

john.meegan@sbs.siemens.com 

SHELL  CHANGE  UPDATE 

In  response  to  “Quick  Change  Artists” 
[March  15, 2002]  on  Shell  Information 
Technology  International’s  effort  to 
implement  Trust  Domain  security  stan¬ 
dards,  we  would  like  to  point  out  that 
we  had  an  outstanding  project  team 


and  technical  resources  group  working 
with  us.  In  particular,  we  wish  to  rec¬ 
ognize  Holly  Giannakopoulos  (change 
agent)  and  Gene  Pagnac  (sponsor). 

Credit  is  also  due  to  the  Trust 
Domain  Customer  Network.  This  core 
team  across  the  Shell  companies  shared 
knowledge  and  plans  on  a  monthly 
basis  throughout  the  certification 
process.  Since  the  time  period  when  the 
article  was  written,  the  remaining  Shell 
companies  have  met  the  implementation 
deadline  and  passed  the  audit.  As  Shell 
continues  to  grow,  there  will  be  ongo¬ 
ing  Trust  Domain  security  projects  man¬ 
aged  with  Shell’s  change  agent  process. 

Janet  Jones,  Project  Manager 
Christy  Dillard,  Change  Agent 
Anita  Bettis,  Change  Agent 
Shell  Information  Technology  International 

Houston 

* 

WHAT  DO  YOU  THINK? 

Send  your  thoughts  and  feedback 
to  letters@cio.com.  Letters  may  be 
edited  for  length  or  clarity. 
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now,  more  than  ever, 

feel  secure 

that  only  the  right  people 

access  your  Network. 

Keep  your  valuable  data  out  of  the  wrong  hands  with  the  pow  er  of  Access  and  Security  solutions  from  Novell. 
Administrators  can  choose  one  or  multiple  authentication  methods  to  identify  users  w  ith  absolute  certainty.  Users 
have  the  ease  of  a  single  enforceable  ID  they  use  am  time,  anywhere — resulting  in  up  to  a  95  percent  decrease 
in  passw  ord-related  help  desk  calls.  And  our  softw  are  can  be  integrated  w  ith  a  full  range  of  your  existing 
security  products,  from  password  protection  to  biometrics.  To  have  the  pow  er  of  Novell  at  your  fingertips,  visit 
www.novell.com/solutions/access_security  today. 

Novell 

the  power  to  chaNge 
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Getting  a  19th-century  building  ready  for  21st-century  business  is  no  small  feat. 

Microsoft®  Visio®  2002  can  help  you  get  up  for  the  task  at  hand.  Create  crystal-clear  network 
and  telecommunications  schematics,  space  plans,  even  detailed  HVAC  layouts,  to  quickly 
communicate  just  what  goes  where,  when,  and  how.  And  with  the  flexibility  to  save  Visio 
diagrams  as  Web  pages  or  to  use  them  in  Microsoft  Office  documents  and  e-mail,  you 
can  make  sure  everyone  sees  a  job  well  done.  To  give  it  a  try,  visit  getvisio2002.com 
or  go  to  Internet  Keyword:  Microsoft  Visio.  Software  for  the  Agile  Business. 
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“I  CAN  FIX  THAT.”  That’s  the  tagline  for  Jimmy  Neutron:  Boy 
Genius ,  but  it  could  just  as  well  be  the  motto  for  the  production 
coordinators  who  put  together  the  animated  feature  film  released 
last  holiday  season. 

DNA  Productions,  the  Irving,  Texas-based  animation  services 
company  that  partnered  with  Nickelodeon  and  screenwriter  and 
director  Steve  Oedekerk  to  produce  the  film,  addressed  the  prob¬ 
lems  of  assembling  the  thousands  of  shots  that  compose  the 
82-minute  movie  by  logging  and  tracking  all  of  them  in  a  database. 

Actually,  DNA  staffers  used  four  FileMaker  Pro  databases.  One 
followed  the  initial  storyboards,  one  tracked  the  shots  assigned  to 
individual  artists,  one  followed  the  progress  of  each  shot  through 
the  production  process,  and  the  final  database  tracked  changes  to 
completed  shots  (known  in  the  industry  as  retakes). 

In  the  past,  animators  tracked  production  elements  using  the 
low-tech  key-ring-and-nail-board  method.  Production  coordina¬ 
tors  used  a  4-feet-by-8-feet  sheet  of  particle  board  with  the  list  of 
shots  running  across  the  top  and  the  list  of  the  four  departments 
necessary  for  approval  running  down  the  side.  A  nail  was  ham¬ 
mered  in  at  each  intersection.  As  the  shots  moved  through  pro- 


Producers  and  animators  working  on  Jimmy  Neutron  tracked 
thousands  of  frames  on  four  massive  databases. 

duction,  staffers  hung  a  simple  key  ring  around  the  appropriate  nail. 

“The  biggest  worry  of  all  was  someone  knocking  the  board 
over,”  says  Ben  Gilberg,  production  coordinator  in  charge  of  retakes 
for  Jimmy  Neutron.  “If  they  did  that,  it  meant  two  people’s  full 
day  of  work  going  back  to  re-create  it.” 

Using  database  software  helped  production  coordinators  track 

each  of  the  movie’s  1,800  indi¬ 
vidual  shots  throughout  the 
entire  process.  The  file  for 
each  shot  also  included  notes 
from  each  of  the  four  depart¬ 
ments  that  had  to  approve  the 
shot.  It  also  enabled  DNA 
Productions  to  shave  produc¬ 
tion  time  to  just  a  year  and  a 
half. 

Production  coordinators 
definitely  prefer  the  auto¬ 
mated  method.  “By  having  it 
Continued  on  Page  24 
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6.6  MILLION;  number  of  business  wireless  data  users  at  the 
end  of  2001  39  MILLION:  estimated  number  of  business 
wireless  data  users  by  the  end  of  2006  $4  BILLION  :  revenue 
derived  by. wireless  data  carriers  from  U.S.  business  market  in 

2001  $16  BILLION:  estimated  revenue  that  will  be  derived 

* 

by  wireless  data' .carrier's  'from  the  U.S.  business  market  by  the 
end  of  2006  23  PERCENT:  workers  in  medium  and  large 
businesses  that  are  considered  mobile  (spending  20  percent  or 
more  of  their  time  out  of  the.  office)  source:  in-stat/mdr 
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in  the  computer,  everyone  has  access 
to  the  shots  instantly,  as  opposed  to 
having  to  walk  over  or  call  someone 
near  the  board  and  say,  ‘Where  is 
this  in  production?’”  says  Gilberg, 
whose  database  had  20,000  entries 
by  the  end  of  production.  “And  on 
the  board,  all  you  had  was  the  key 
ring.  With  FileMaker,  you  have  all 
the  notes  on  every  shot,  dating  back 
to  the  beginning,  at  your  fingertips 
so  there  are  never  any  questions 
about  who  said  what.” 

The  production  team  is  currently 
using  FileMaker  Pro  to  track  produc¬ 
tion  of  the  jimmy  Neutron  TV  series 
and  will  use  it  on  upcoming  anima¬ 
tion  features.  The  home  video  version 
of  the  movie  hits  stores  this  June. 


WEB 


STRATEGIES 


Classics  in  Cyberspace 

STROLL  THROUGH  Boston’s  Symphony  Hall  during  intermission,  and  the  concourse  will 
be  mobbed  with  fur-swaddled  dowagers  and  retired  bankers  teetering  around  in  60-year-old 
J.  Press  suits— not  exactly  the  picture  of  hipness.  Certainly  not  as  hip  as  the  performers  they’re 
coming  to  see. 

The  classical  music  world  has  hit  cyberspace  like  a  Wagner  finale.  Musicians  from  bas¬ 
soonists  to  the  percussionist  who  crashes  the  cymbals  are  establishing  a  serious  Internet 
presence,  creating  websites  to  promote  their  virtuosity.  In  addition  to  digitized  photos, 
resumes,  biographies  and  performance  dates,  many  musicians— like  Simon  O’Neill,  a  tenor 
at  the  Juilliard  Opera  Center  in  New  York  City— are  even  sticking  MP3s  of  their  perform¬ 
ance  up  on  their  sites  so  that  prospective  bookers  can  preview  how  they  sound.  O’Neill,  a 
New  Zealand  native,  says  it’s  been  a  huge  boon  to  his  career.  He’s  doing  a  professional 
recital  series  later  this  year.  The  producers  first  heard  him  on  his  site,  www.simononeill 
.com.  “It’s  wonderful  how  the  Internet  is  like  that,”  he  says. 

John  Robinson,  executive  director  of  Frank  Salomon  Associates,  a  New  York  City  man¬ 
agement  company  that  represents  classical  performers,  agrees  that  a  Web  presence  can 
really  help  an  up-and-coming  artist  develop  a  fan  base.  The  Buffalo,  N.Y.-based  Amherst 
Saxophone  Quartet  has  a  particularly  sophisticated  website,  amherstsaxophonequartet 
.buffalo.edu,  that  features  concert  clips  and  CDs  available  for  purchase  online.  “I  think  they 
do  get  bookings  and  can  convert  certain  presenters  by  pointing  them  to  the  site  and  hav¬ 
ing  them  listen  around,”  he  says.  In  the  future,  Robinson  adds,  “everyone  will  need  to  do 
this,  and  it’ll  be  an  advantage  to  be  ahead  of  the  curve.”  -Eric  Berkman 
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TECHNOLOGY 


In  Good  Taste 


By  Stephanie  Overby 

MOVE  OVER  Gene  Simmons.  Your  reign 
as  king  of  the  tireless  tongue  is  over. 
Researchers  in  Brazil  and  Wales  have 
developed  an  indefatigable  electronic 
tongue  that  can  actually  taste  subtle  dif¬ 
ferences  in  a  variety  of  liquids.  The 
“robo-tongue”  can  detect  sweet,  sour, 
bitter  and  salty  characteristics  in  liquid 
products  in  which  consistent  taste  is  crit¬ 
ical  to  manufacturers,  such  as  mineral 
water,  coffee,  wine  and  tea. 

When  detecting  those  taste  attributes, 
the  robo-tongue  is  an  order  of  magni¬ 
tude  more  sensitive  than  the  human 
tongue.  It  distinguished  between  Cab¬ 
ernet  Sauvignons  of  different  years  from 
the  same  winery,  sensed  low  levels  of 
impurities  in  water  and  perceived  sugar 
and  salt  at  concentrations  too  low  for 


human  taste  buds  to 
detect. 

Professor  Martin 
Taylor,  head  of  the 
molecular  electronics 
research  group  at  the 
University  of  Wales  in 
Bangor,  says  there  is  a 
strong  possibility  the 
techno-tongue  could 
detect  other  tastes. 

The  tongue,  which  actually  fits  on  a 
microscope  slide,  measures  the  electrical 
response  through  a  thin  layer  of  organic 
matter  spread  over  a  pair  of  fingerlike 
electrodes  when  it  is  immersed  in  liquid. 
Taylor  and  Antonio  Riul  of  the  agricul¬ 
tural  instrumentation  research  unit  of 
Brazil’s  Ministry  of  Agriculture,  Live¬ 


Soon,  Gene’s  tongue  may  not  be 
the  most  famous  in  the  land. 


stock  and  Food  Supply  in 
Sao  Carlos  recently  pa¬ 
tented  the  device.  The 
tongue  took  three  years 
to  develop  and  won  the 
Sao  Paulo  governor’s 
prize  for  the  most  inno¬ 
vative  invention  in  2001. 

The  miniature  device 
could  eventually  replace 
human  testers  in  the  cof¬ 
fee  and  wine  industries, 
but  more  immediately  it 
will  help  reduce  their 
workload  when  real  taste 
buds  wear  out,  says 
Taylor.  The  electronic 
tongue  can  be  washed 
and  reused  from  liquid  to  liquid,  whereas 
a  human  tongue  can  become  overly  satu¬ 
rated  with  a  particular  taste  and  lose 
effectiveness. 

Wine  tasters  won’t  lose  their  day  jobs 
anytime  soon,  tough.  Human  taste  buds 
are  still  preferable  for  detecting  the  myr¬ 
iad  subtle  and  unique  differences  in  fine 
wine  and  whiskey. 
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imageRUNNER™ 


Overnight 

Delivery 


FJSS  431962 


A  box  that  delivers  paper  documents  anywhere  overnight? 


Or  a  box  that  delivers  them  instantly  over  the  internet? 


The  Canon  imageRUNNER  with  document  distribution  technology. 

You  can  send  paper  documents  anywhere,  in  any  form,  at  anytime,  right  over  your  network  or  the  internet. 
Instantaneously.  Simply  scan  a  document  into  the  imageRUNNER  5000,  and  you  can  send  it  to  any  desktop, 
e-mail  address,  fax  machine,  database  or  file  server.  And  since  the  Canon  imageRUNNER  is  capable  of 
integrating  directly  with  your  existing  e-mail,  lanfax,  and  document  management  software,  you  can 
maximize  your  investment  in  these  systems*.  The  cost  and  hassle  of  overnight  delivery  are  finally  over. 
At  Canon,  we’re  giving  people  the  know-how  to  make  paper  documents  work  in  an  internet  world. 
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e-mail 
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PRINT 


Call  1-866-25-CANON  or  visit  www.imagerunner.com 
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Washington  Watch 

Edited  by  Janice  Brand 


A  Bridge  Between  Public  and  Private  IT 


CONGRESS  is  attempting  to  tap  the  pri¬ 
vate  sector’s  IT  expertise  and  resources  by 
allowing  federal  IT  workers  to  swap  jobs 
with  their  peers  in  the  corporate  world. 

The  Federal  Information  Technology 
Workforce  and  Acquisition  Improvement 
Act,  sponsored  in  the  House  by  Rep,  Tom 
Davis  (R  ~Va.)  and  Rep.  Dan  Burton 
(R-Ind.),  and  in  the  Senate  by  Sen.  George 
Voinovich  (R-Ohio),  was  passed  by  the 
House  in  late  March. 
The  bill  would  estab¬ 
lish  an  exchange  pro¬ 
gram  between  the 
federal  government 
and  the  private  sector 
to  promote  the  devel¬ 
opment  of  IT  exper¬ 
tise.  Aimed  at  mid¬ 
level  IT  managers,  the 
program  allows  participants  to  trade  jobs 
for  up  to  two  years.  Participants  would 
have  to  apply  through  their  employer  and 
would  be  required  to  sign  a  contract  man¬ 
dating  their  return  to  their  original  job. 

“It’s  an  opportunity  for  government  and 
private  sector  IT  professionals  to  cross- 
pollinate  ideas,  training  and  management 
practices  for  a  better  government  and  a 
more  productive  private  sector,”  Davis  says. 

Davis’s  legislation  also  addresses  a  larger 
problem.  More  than  50  percent  of  federal 
IT  workers  will  be  eligible  for  retirement  by 
2006,  and  restrictions  on  compensation  for 
public  sector  positions  continue  to  discour¬ 
age  recruitment  efforts.  In  addition,  gov¬ 
ernment  agencies  such  as  the  FBI  and  the 
Department  of  the  Interior  have  come 
under  fire  in  the  past  year  for  having  inad¬ 


equate  computer  security  and  IT  resources. 
The  exchange  program  is  one  way  for  the 
government  to  learn  from  the  private  sec¬ 
tor’s  best  practices  in  these  areas,  says 
Harris  Miller,  president  of  the  Information 
Technology  Association  of  America,  a  tech 
trade  organization  in  Arlington,  Va. 

“This  is  a  good  opportunity  for  the  gov¬ 
ernment  to  share  the  latest  thinking  on  top¬ 
ics  such  as  security  without  spending  a  lot 


of  money  or  creating  conflicts  of  interest,” 
Miller  says.  “Both  sectors  have  tremendous 
quantities  of  knowledge  that  can  be  valu¬ 
able  to  each  other.” 

Senate  action  on  the  bill  is  expected 
within  the  next  few  months. 

Would  you  trade  your  job  for  two  years? 
Let  Staff  Writer  Simone  Kaplan  know  at 
skaplan@cio.com. 


Net  Guard  Update 

TWO  MONTHS  AFTER  CALLING  FOR  the  creation  of  an  organization  of 
mobilized  technology  experts  (see  “Call  Up  the  Net  Guard,”  www.cio.com/ 
printlinks),  Sens.  Ron  Wyden  (D-Ore.)  and  George  Allen  (R-Va.)  have  taken  the 
next  step.  In  March,  the  two  introduced  the  Science  and  Technology  Emergency 
Mobilization  Act,  which  would  create  a  body  of  science  and  technology  workers 
who  could  respond  to  catastrophes  affecting  communications  and  technology. 

The  bill  would  establish  a  structured  network  of  expertise  to  prevent  break¬ 
downs  in  connectivity  and  communications  similar  to  what  occurred  on  Sept.  11, 
says  Carol  Guthrie,  Wyden’s  press  secretary.  According  to  Wyden,  the  bill  would 
amass  teams  of  volunteers  with  science  and  technology  expertise,  create  a 

database  of  private  sector  equipment  and 
knowledge  that  emergency  officials  can  call  on 
if  needed,  and  set  up  a  national  clearinghouse 
and  test  bed  for  innovative  emergency 
prevention  and  response.  The  latter  would  be 
overseen  by  the  National  Institute  of  Standards 
and  Technology  (NIST)  and  would  act  as  “a 
portal  for  the  private  sector  to  bring  their 
ideas,  their  people,  their  expertise  and  their 
equipment  to  bear  on  the  war  against  terrorism,”  Guthrie  says.  If  a  natural  disaster 
or  a  terrorist  incident  were  to  occur,  the  NIST  center  would-be  the  point  of  contact 
when  companies  or  IT  workers  wanted  to  help  and  donate  services,  she  says. 

As  of  press  time,  the  bill  had  been  referred  to  the  Senate  Commerce,  Science 
and  Transportation  Committee.  -S.K. 


“Current  safeguards  are  insufficient  to  prevent  information  from  being 
used  by  parties  hostile  to  U.S.  security  interests.” 

- Former  U.S.  Sen.  Mack  Mattingly,  chairman  of  the  Task  Force  on  Information  Exchange  and  Financial  Privacy 
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WHAT  KIND  OF  DECISIONS  ARE  REQUIRED 
IN  TODAY'S  BUSINESS  CLIMATE? 

SMART  ONES. 


Arriving  at  a  smart  business  deci¬ 
sion  can  happen  anywhere.  But  the 
process  first  requires  information; 
information  that  needs  to  be  gathered 
from  multiple  sources,  then  analyzed 
and  shared  before  it  can  be  used  to 
your  advantage. 


The  challenge  today  is  twofold. 

One:  how  do  you  get  the  infrastruc¬ 
ture  in  place  to  access  disparate  data 
sources  and  create  and  distribute 
actionable  information?  And,  two: 
also  meet  the  demands  to  reduce 
costs  and  increase  productivity? 


You  turn  to  Crystal  Decisions™.  Our 
enterprise-wide  reporting,  analysis 
and  web-based  information  delivery 
solutions  have  a  proven  track  record 
of  helping  our  customers  better 
utilize  information  to  competitive 
advantage  and  profit. 


At  Crystal  Decisions,  the  makers  of 
Crystal  Reports'5,  we've  met  the  standards 
of  our  key  partners  like  SAP,  IBM,  Microsoft 
and  Baan.  We're  confident  we  can  meet 
yours.  To  find  out  how,  visit  us  at: 
www.crystaldecisions.com/ent/006/ 
or  call  1-866-821-3525. 


Access.  Analyze.  Report.  Share." 


crystal  decisions 


A  SEAGATE  COMPANY 


There's  a  Dell  PowerEdge  server 
with  Windows'  2000  Server 
for  every  kind  of  business. 

From  "kind  of  start  up"  to  "kind  of  FORTUNE  500.®" 


iiii 


•!!!!!!••••  •••!!!!!!!•••••! 


jjjjjjjjjj. 

S!SS!!!S!!! 

jjjjjjjjjj; 

«§••••§•••• 


j  j  )  }  ’•-••iff  iiii 


■JrJkJ  /  f 


"■••III 

!!!!!!!•••••••• 

••••#•••••••••# 


►•♦•♦•••••••••J 


: 

PP;V 

)  /  j  :  i 

%Ks»S  ■  '  ' 


apsM 

iiiHiHiiliiiliiiiiiii 


MtllMlHtJ 
■  * • • • •••••••# 


!!!!!!!!*•** 

itiMHKiii  immmti 


ItllillHMI 

tiitmtoti 

•«•••••••••• 

DMtHMHt 

(itHtlMMt 

TIMMIMM* 


••••««**»•** 

MMilttIHI 

OMIMIMM 


illMUIIt  *«•*•••••} 


'  idlKI'l 

MtJ 
•  ( 


No  matter  the  size  of  your  company,  we've  got  a  server  that  fits.  Dell  PowerEdge  servers  with  Windows®  2000 
Server  operating  system  have  many  amazing  "abilities":  scalability,  availability,  manageability  and  serviceability.  So  they 
grow  with  your  business,  minimize  downtime,  are  easy  to  integrate  and  even  easier  to  support.  No  matter  what  your 


Ask  about 


60  DAYS 

same-as-cash 

business  needs  -  from  file/print  to  database  management  -  you  can  choose  the  server  with  Microsoft®  Windows®  2000  ’w  qualified  customer- 


Server  operating  system  that  is  right  for  you.  And,  by  dealing  direct  with  Dell,  you  get  a  system  customized  to  fit  your  business  needs,  at  an  affordable 
price,  backed  by  our  award-winning  service  and  support.  It's  a  nice  mix  of  exactly  the  server  you  need  with  exactly  the  operating  system  you  want. 


PC  Magazine  Editors'  Choice  Award 

Small  Business  Solutions 
-April  2002 


Dell  |  Small  Business 


PowerEdge™  1500SC  Server 

NEW  Simple  and  Strong  Tower  Server 

•  Intel®  Pentium®  III  Processor  at  1.13GHz 

•  Dual  Processor  Capable 

•  128MB  133MHz  ECC  SDRAM  (up  to  4GB) 

•  18GB5  (10K  RPM)  Hot-Swap  Ultra3  SCSI  Hard  Drive 

•  Embedded  Dual-Channel  Ultra3  SCSI  Controller 

•  Embedded  Intel®  PRO  Gigabit  NIC 

•  1-Yr  Next  Business  Day  On-Site  Service,3 1  -Yr  Limited  Parts 
Warranty,2 1-Yr  24x7  Dedicated  Server  Phone  Tech  Support 

^  c>r  as  low  as  $37/mo.,  46  payments.30  60 

days  same-as-cash  for  qualified  customers. 

IkVW  E-VALUE  Code:  11567-290512 


Recommended  upgrades: 

•  NEW  PowerConnecf  2124* *  24-Port  Unmanaged  Switch 
with  Gigabit  Port,  add  $299 

•  System  Including  Small  Business  Server  2000  and 
Memory  Upgrade  to  256MB  is  $2699 


PowerEdge™  1650  Server 

NEW  Highly  Available  1U  Rack-Optimized  Server 

•  Intel®  Pentium®  III  Processor  at  1.13GHz 

•  Dual  Processor  Capable 

•  128MB  133MHz  ECC  SDRAM  (up  to  4GB) 

•  18GB5  (1  OK  RPM)  Hot-Swap  Ultra3  SCSI  Hard  Drive 

•  Dual  Embedded  Gigabit  NICs 

•  Hot-Swap,  Redundant  Cooling  Fans 

•  Optional  Embedded  Dual-Channel  RAID  Solution 

•  Optional  Redundant  Power  Supplies 

•  3-Yr  Next  Business  Day  On-Site  Service3 

A  or  as  low  as  $48/mo„  46  payments.30  60 

Vfl  days  same-as-cash  for  qualified  customers 

I  WWW  E-VALUE  Code:  11567-290516 

Recommended  upgrade: 

•  System  Including  Windows®  2000  Server  is  $2499 


PowerEdge™  2500  Server 

Robust  and  Scalable  Tower  Server 

•  Intel®  Pentium®  III  Processor  at  1.13GHz 

•  Dual  Processor  Capable 

•  128MB  133MHz  ECC  SDRAM  (up  to  6GB) 

•  18GB5  (10K  RPM)  Hot-Swap  Ultra3  SCSI  Hard  Drive 

•  Embedded  Dual-Channel  Ultra3  SCSI  Controller 

•  Embedded  Intel®  10/100  NIC 

•  Hot-Swap,  Redundant  Cooling  Fans 

•  Optional  Hot-Swap,  Redundant  Power  Supplies 

•  Optional  Embedded  Dual-Channel  RAID  Solution 

•  3-Yr  Next  Business  Day  On-Site  Service3 

A  or  as  low  as  $54/mo.,  46  payments.30  60 

^  I  c'a'*'s  sanie'as‘cash  f°r  qualified  customers 

Swww  E-VALUE  Code:  11567-290518 


Recommended  upgrades: 

•  PowerConnect”  3024*  24-Port  Managed  Switch,  add  $699 

•  System  Including  Windows®  2000  Server  is  $2699 


PowerVault™  PV715N  Storage 

NEW  NAS  File  Sharing  Storage 

•  Offloads  Storage  Load  from  Desktops  and  Servers 

•  Snap  Shot  Capability  for  Backing  up  Stored  Data 

•  Intel®  Celeron®  Processor  at  900MHz 

•  256MB  SDRAM  (up  to  512MB) 

•  160GB  IDE  Hard  Drive  -  Four  40GB  Bays 

•  Dual  10/100  Ethernet  Ports 

•  SCSI  Port  for  Local  Backup 

•  Multi-Platform  Support  of  PC,  Unix,  Apple,  and  Novell 

•  Powered  by  Windows®  Operating  System 

•  1-Yr  Next  Business  Day  On-Site  Service,3  3-Yr  Limited  Parts 
Warranty,2  Lifetime  24x7  Dedicated  Server  Phone  Tech  Support 

or  as  low  as  $51/mo.,  46  payments30  60 
QJ  n  ■  days  same-as-cash  for  qualified  customers 

I  #  W  W  E-VALUE  Code:  11567-290517n 


pentium®/// 


Servers  for  any  size  business.  Easy  as 


D*LL 


Visit  www.dell.com/cio  or  call  toll  free  1-877-696-3355. 


Call:  M-F 7a-8P  Sat  8a -5P  ct  Dell  PCs  use  genuine  Microsoft®  Windows® 

Pricing,  specifications,  availability  and  terms  of  offer  may  change  without  notice.  Taxes  and  shipping  charges  extra,  and  vary.  U  S.  Dell  Small  Business  (BSD  and  WWW.micr0S0ft.C0m/piracy/h0Wt0tell 
BASD)  new  purchases  only.  Dell  cannot  be  held  responsible  for  errors  in  typography  or  photography. 


‘This  device  has  not  been  approved  by  the  Federal  Communications  Commission  for  use  in  a  residential  environment.  This  device  is  not,  and  may  not  be,  offered 
for  sale  or  lease,  or  sold  or  leased  for  use  in  a  residential  environment  until  the  approval  of  the  FCC  has  been  obtained 


■For  a  copy  of  our  Guarantees  or  Limited  Warranties,  write  Dell  USA  L.P..  Attn:  Warranties,  One  Dell  Way,  Round  Rock,  Texas  78682.  'Service  may  be  provided  by 
third  party  Technician  will  be  dispatched,  if  necessary,  following  phone-based  troubleshooting.  To  receive  Next-Business-Day  service,  Dell  must  notify  service 
provider  before  5  pm  (depending  on  service  contract)  customer's  time.  Availability  varies.  'For  hard  drives,  GB  means  1  billion  bytes,  accessible  capacity  varies  with 
operating  environment  "Monthly  payment  is  based  on  a  48-month  12  99%  interest  rate  for  qualified  business  customers.  Your  interest  rate  and  monthly  payment 
may  be  same  or  higher,  depending  on  yout  creditworthiness  Minimum  transaction  size  of  $500  is  required  Maximum  aggregate  financed  amounts  not  to  exceed 
$25,000  Under  60  Days  Same-As-Cash  QuickLoan.  interest  accrues  during  first  60  days  after  the  QuickLoan  s  Commencement  Date  (which  is  five  days  after  product 
ships)  if  balance  is  not  paid  within  these  60  days.  STATED  INTEREST  RATE  AND  60  DAYS  SAME-AS-CASH  QUICKLOAN  ARE  FOR  QUALIFIED  ONLINE  BUSINESS 
CUSTOMERS  OFFER  VARIES  BY  CREDITWORTHINESS  OF  CUSTOMER  AS  DETERMINED  BY  LENDER  Taxes,  fees  and  stopping  charges  ate  extra  and  may  vary  Not 
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Homework  That  Pays  „  s„.  s* 


BILL  GATES  isn’t  the  only  high-tech 
magnate  in  the  great  state  of  Washington. 
Deep  in  his  parents’  basement  in  Richland, 
18 -year-old  high  school  senior  Joel  Cline 
runs  a  profitable  technology  business  of  his 
own:  Cline  Communications  ( wwiv.cline 
communications.net).  CIO  recently  spoke 
with  him  about  his  life  and  work. 

CIO:  What  does  Cline  Communications 
do? 

Cline:  We’re  into  Web  development, 
hosting  and  marketing  for  small  businesses 
and  individuals.  I  started  the  company  in 
1999  with  the  idea  of  helping  small- 
business  owners  jump  on  the  Internet.  A 
lot  of  companies  charge  nothing  less  than 
$399  for  a  business  to  get  on  the  Web. 

That  is  ridiculous. 

What  do  you  charge? 

We  design  websites  for  $200  at  the  most. 

I  do  trade  and  barter  with  people  quite  a 
bit,  though.  For  example,  I  received  my 
senior  portraits  for  free  when  I  designed 
the  photography  studio’s  website.  There’s 
a  company  I  do  a  website  for  that  rents 
out  those  big  toys  that  blow  up  and  you 
bounce  around  inside  of  them.  In 
exchange  for  their  website  design,  I  had 
them  bring  one  to  my  house  one  day  to 
give  my  two  younger  brothers  something 
to  play  on. 

How  do  you  get  prospective  clients  to 
take  you  seriously? 

Many  think  that  it’s  some  lawn-mowing 
business.  Sometimes,  I  tell  [prospective 
clients]  it’s  more  of  a  family-owned  business 
so  that  they  think  I’m  not  the  owner,  and 
then  they  seem  to  want  to  work  with  me. 

Which  is  harder:  going  to  high  school 
or  running  a  business? 

Going  to  high  school,  because  it  keeps  me 


away  from  running  the  business.  I  go  to 
school  in  the  afternoons  so  that  I  have  time 
to  work  in  the  morning.  But  in  high 
school,  I  also  run  on  our  cross-country  and 
track  and  field  teams. 


What’s  your  best  mile  time? 

I’ve  run  a  5:09  mile.  It’s  not  all  that 
great,  but  we’ll  see  what  I  can  pull  off 
this  year. 


1.  Adapt  the  methodology  to  the  company’s  processes  and  deliverables. 
Position  workflow  or  process  changes  inherent  to  the  methodology  as  an 
evolution  of  current  processes,  rather  than  something  completely  new. 

2.  Decide  who  will  be  accountable  for  achieving  the  goals  of  each  individual 
metric.  Most  likely  candidate:  the  business  unit  manager  most  closely  tied 
to  it. 

3.  Specify  which  measurement  (for  example,  cost  savings,  sales  figures  or 
customer  statistics)  is  being  used  as  a  metric,  as  well  as  the  process  for 
review  and  analysis. 

4.  Conduct  an  ongoing  review  of  all  metrics,  interpreting  results  and 
identifying  opportunities  for  improvement. 

5.  Make  sure  that  business  and  IT  managers  responsible  for  defining, 
deploying  and  monitoring  metrics  are  equally  comfortable  with  business  and 
technical  issues. 

6.  Provide  the  business  and  IT  managers  with  adequate  time  and  resources  to 
develop  and  track  metrics. 

7.  Make  metrics  that  are  related  to  IT  projects  adaptable  to  changes  in 

projects’  operational  focus.  source:  giga  information  group 


ROLLING  OUT  an  IT  valuation  methodology  across  an 
enterprise  or  even  within  an  IT  department  is  a  major 
undertaking  (see  “How  to  Use  the  Balanced  Scorecard,” 
Page  93).  Laying  the  groundwork,  determining  the  right 
metrics  and  the  right  amount  of  metrics,  and  getting  the 
staff  involved  are  all  critical  to  a  project’s  success.  This 
checklist,  based  on  a  recent  Giga  Information  Group 
report,  outlines  considerations  to  keep  in  mind  when  implementing  a  valua¬ 
tion  methodology. 


Seven  Tips  for 
Developing  Value 

Metrics  Lafe  Low 


“Change  is  not  made  without  inconvenience,  even  from  worse  to  better.” 

-Essayist  Richard  Hooker  (1554-1600) 
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FILE  UNDER  :  DATA  PROTECTION 


How  safe  is  your  data? 

(Really.) 


'An  enterprise  cannot  become  resilient  unless  it  can  effectively 
operate  a  backup-and-restore  method  for  all  of  its  user 
workstations  -  in  the  offices,  mobile  and  remote. 

Continuous  backup,  and  the  ability  to  restore  anywhere  and 
anytime,  is  fundamental  not  only  as  a  convenience  to 
the  individual  user,  but  to  the  survival  of  the  business. 

The  great  majority  of  tools  for  backup  and  restore  are  based  on 
the  erroneous  assumption  that  the  user  will  have  constant 
access  to  a  high-speed  LAN.  ff 

Best  Practices  for  Mobile  Workforce  information  Backup, 

John  Girard,  Gartner  Research,  QA,  Dec  2001 


With  Connected  TLM™,  you  can  securely  protect, 
and  restore  your  data-in  the  office  or  over  the  Internet— 

anytime,  anywhere. 


CONNECTED 


DATA  SAFE. 
PCs  UP. 
COSTS  DOWN. 
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Off  the  Shelf 


Edited  by  Carol  Zarrow 


We’re  All  OK 

Primal  Leadership:  Realizing  the 
Power  of  Emotional  Intelligence 

By  Daniel  Goleman,  Richard  Boyatzis 
and  Annie  McKee 

Harvard  Business  School  Press,  2002,  $26.95 

It’s  like  deja  vu  all  over  again  as  Goleman, 
author  of  Emotional  Intelligence  and 
Working  with  Emotional 
Intelligence ,  recycles  his 

Emotional  Intelligence  theory, 
this  time  applying  it  to  the  prin¬ 
ciples  of  leadership.  In  Primal 
Leadership,  Goleman  and  his 
fellow  researchers  argue  that 
the  most  important  role  of 
leaders  is  to  drive  an  organiza¬ 
tion’s  collective  emotions — 
rather  than  its  earnings  or  strat¬ 
egy — in  a  positive  direction. 

Feelings  are  contagious.  Even  in  the 
work  environment,  people’s  feelings,  both 
positive  and  negative,  tend  to  rub  off  on 
each  other.  A  leader’s  mood  is  particularly 
infectious,  say  the  authors:  Employees  take 
their  emotional  cues  from  the  top,  and  even 
when  the  boss  isn’t  highly  visible,  there’s  a 
trickle-down  effect.  The  key,  says  Goleman, 
is  to  infect  your  workers  with  the  right 
kinds  of  emotions.  And  that  requires — you 
guessed  it — emotional  intelligence. 

The  authors  link  leadership  successes 
and  failures  to  what  they  have  dubbed  pri¬ 
mal  leadership,  a.k.a.  emotionally  intelli¬ 
gent  leadership:  the  ability  to  create  a 
reservoir  of  positive  feelings.  A  reso¬ 
nant  (and  thus  effective)  leader  is  in 
tune  with  employees’  emotions  (and 
vice  versa)  and  creates  a  positive  tone, 
while  a  dissonant  (and  ineffective) 
leader  is  out  of  touch  with  the  feelings 
within  an  organization  and  sets  a  neg¬ 
ative  tone. 

For  those  who  might  say,  “Well, 
duh,”  the  authors  add  that  being  a  suc¬ 
cessful  leader  goes  beyond  merely  being 


a  jolly  good  fellow,  and  they  offer  plenty 
of  guidance  for  dissonant  leaders  seeking 
recovery.  Although  the  book  claims  to 
transform  leadership  from  art  to  science 
(and  it  is  chock-full  of  interesting  research 
with  business  case  studies),  it’s  really  more 
like  a  self-help  book  for  leaders.  But  hey, 
that  can’t  be  bad.  -Stephanie  Overby 

Avoid  Collisions 

When  Generations  Collide:  Who 
They  Are.  Why  They  Clash.  How  to 
Solve  the  Generational  Puzzle  at  Work. 

By  Lynne  C.  Lancaster  and 
David  Stillman 

HarperCollins  Publishers,  2002,  $25.95 

A  lot  has  been  written  about  gender  and 
racial  politics  in  the  workplace,  but  another 
tension  point  has  been  lost  in  the  shuffle: 
generational  differences.  Enter  When 
Generations  Collide,  a  useful  book  by 
Lancaster  and  Stillman,  cofounders  of  a 
company  that  lectures  and  trains  on  that 
very  subject. 

Their  premise  is  that  we’re  seeing  a  his¬ 
torically  broad  age  range  of  employees 
working  together — spanning  the  tradition¬ 
alists  of  the  World  War  II  generation 
through  the  baby  boomers  and  Gen  X-ers 
to  the  latest  arrivistes,  the  millennial.  If 
employers  don’t  understand  how  each  gen¬ 
eration  is  unique,  their  recruiting,  retention 
and  conflict-management  efforts  will  fail. 
As  a  manual  for  managers  and  employ¬ 
ees  looking  to  avoid 
problems,  the  book  by 
and  large  succeeds.  It’s 
penned  in  a  breezy,  con¬ 
versational  tone  that 
makes  for  easy  reading. 
Lancaster  and  Stillman 
deserve  kudos  for  avoid¬ 
ing  preachiness  and 
instead  letting  presum¬ 
ably  true  anecdotes  tell 
the  story.  To  be  sure, 
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5.  Throwing  the  Elephant: 

Zen  and  the  Art  of  Managing  Up 

by  Stanley  Bing 

HarperCollins  Publishers,  2002 

4.  Fish!  A  Remarkable  Way  to  Boost 
Morale  and  Improve  Results 

by  Stephen  C.  Lundin,  Harry  Paul  and 
John  Christensen 

Hyperion,  2000 

3.  Primal  Leadership:  Realizing  the 
Power  of  Emotional  Intelligence 

by  Daniel  Goleman,  Richard  Boyatzis 
and  Annie  McKee 

Harvard  Business  School  Press,  2002 

2.  Good  to  Great:  Why  Some 
Companies  Make  the  Leap. ..and 
Others  Don’t 
by  Jim  Collins 

HarperCollins  Publishers,  2001 

1.  Jack:  Straight  from  the  Gut 

by  Jack  Welch 

Warner  Books,  2001 

SOURCE:  Data  from  week  of  March  24,  2002, 
compiled  by  Borders  Group,  Ann  Arbor,  Mich, 

their  characterizations  of  the  various  gener¬ 
ations  at  times  come  off  as  pat  and  stereo¬ 
typed.  Some  of  the  real-life  dialogue  they 
incorporate  sounds  canned.  Plus,  the  book 
would  benefit  from  a  deeper  discussion  of 
social  and  cultural  differences  within  gen¬ 
erations.  But  all  in  all,  this  book  is  a  worth¬ 
while  read  for  anyone  in  the  workplace 
interested  in  settling  multigenerational 
“ClashPoints”  (Lancaster  and  Stillman’s 
term,  not  mine).  -Eric  Berkman 
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I.T.  INFRASTRUCTURE 

Big  Network  on  Campus 


By  Sarah  Johnson 


STUDENTS  at  Howard  University  in 
Washington,  D.C.,  have  one  less  worry: 
They  no  longer  have  to  fight  with  their 
roommate  over  using  the  phone — or  even 
the  remote  control. 

The  school’s  14  dorms  recently  under¬ 
went  a  technology  overhaul;  now  each  res¬ 
ident  has  a  separate  telephone  line  and 
voice  mail,  50-channel  cable  connection, 
and  wireless  link  to  the  Internet  and 
Howard’s  network. 

One  would  surmise  that  there  will  be  no 
more  squabbling  about  missed  phone  mes¬ 
sages  or  accusations  of  hogging  the  Net.  In 
theory,  two  roommates  could  have  two  of 
everything  working  at  once,  one  TV  tuned 
in  to  CNN  and  another  on  VH1.  Called 
Port-per-Pillow,  the  $10.4  million  project 
gives  each  student  living  on  campus  three 
ports  to  access  three  technologies.  Con¬ 
sequently,  Howard’s  4,013  resident  stu¬ 
dents  will  be  more  knowledgeable  about 
technology  than  their  alumni  counterparts 
were  on  graduation  day  (the  dorms  didn’t 
even  have  cable  access  a  year  ago). 

“You  visit  a  student  in  the  dorms  and  the 
TV  is  on,  the  stereo  and  the  computer  are 
on,”  says  Interim  Vice  Provost  and  CIO 
Charles  W.  Moore.  “Everything’s  on  at 
once  and  they’re  on  the  phone,  but  they’re 
being  productive.” 

The  project  took  only  six  months  to 
complete  and  included  a  network  infra¬ 
structure  from  Siemens  and  Cisco.  It  was 
part  of  Howard’s  Strategic  Framework  for 
Action  program,  which  started  five  years 
ago  and  aimed  to  modernize  the  campus. 
Other  improvements  have  included  giving 
students  wireless  cards  for  mobile  access 
to  the  network,  adding  computer  centers 
to  the  dorms  and  building  the  Digital 
Auditorium — a  theater  that  has  been  trans¬ 


formed  into  a  modern  lecture  hall  with 
wireless  technology,  cameras  and  micro¬ 
phones  for  easy  interaction  between  a  large 
room  of  students  and  the  professor.  As  a 
result  of  all  the  work,  Moore  says,  students 
will  have  higher  technology  standards  after 
graduation. 

“When  students  leave,  they’re  not  only 
knowledgeable  and  prepared,  but  they’re 


going  to  push  hard  to  have  at  least  the 
technology  they  have  here,”  he  says. 

feedback 

i  Responses  or  ideas  for  Trendlines? 
E-mail  Features  Editor  Lafe  Low  at 
llow@cio.com. 


“When  my  board  says,  ‘Are  we  getting  $80  million  of  value  from  IT?’  I 
can  say,  ‘You’re  getting  $81  million,  and  here’s  why.’” 

-Walter  Weir,  CIO  of  the  University  of  Nebraska 
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ILLUSTRATION  BY  SCOTT  BAKAL 


YOU  CAN  HEAR  THEIR  STORY  @  www.kpmgconsulting.com/results 


"We  told  KPMG  Consulting: 
we  need  a  web-based 
enrollment  system  so  simple..." 


"...that  our  MetLife  customers  can  more  easily  manage 
their  financial  future. 

“The  MetLife  mission  is  to  build  financial  freedom 
for  our  customers.  KPMG  Consulting  worked  with 
us  to  design  and  build  an  on-line  system  faster  than 
we  had  thought  possible.  The  new  system  gives 
our  customers  a  single  site  for  enrollment,  product 
information,  and  performance. 

"Our  customers  and  our  own  employees  are 
very  happy  with  their  'new  freedom.'  Customer 
satisfaction  scores  are  up,  and  so  are  employee 
productivity  and  our  operating  earnings." 


"We're  delighted  that  we  surprised  MetLife  with  how 
quickly  we  were  able  to  help  them  design  and  build  their 
new  on-line  system. 

“But  we're  even  happier  that  the  system  helped  them 
become  an  even  more  successful  company. 

"After  all,  that's  the  reason  we're  in  business." 


BUSINESS  SYSTEMS:  STRATEGY  IMPLEMENTATION  RESULTS 


Mark  Hammersmith 

CIO  Institutional  Business,  MetLife 


'  •'«&  . 


Paul  McDonnell 

Managing  Director,  Financial  Services,  KPMG  Consulting 


©2002  KPMG  Consulting.  Inc  All  rights  reserved  KPMG  Consulting,  Inc.  is  an  independent  consulting  company. 


#1  in  BusinessWeek’s  2001  Buying  Guide 

Compaq  Evo  Notebook  N600c 

Mobile  Intel®  Pentium®  III  Processor  1.20GHz-M 

Designed  to  meet  the  needs  of 
professional  road  warriors 


Winner,  Network  World  Best  of  the 
Tests  Award,  Nov.  2001 
Compaq  ProLiant  DL380  Server 

Intel®  Pentium®  III  Processor  1.13GHz 

The  first  density-optimized  server  to 
provide  enterprise-class  availability  and 
performance  all  in  a  2U  form  factor 


Best  Desktop  PC,  Best  of  COMDEX 

Compaq  Evo  D500  Ultra-Slim  Desktop 

Intel®  Celeron®  Processor  1.30GHz 

Leading  the  evolution  of  the  desktop  PC 


1st  Class  Award,  Mobile  Computing, 
Feb.  2002 

Compaq  iPAQ  H3835  Pocket  PC* 

Powerful  and  expandable  pocket  PC  that 
enables  you  to  connect  to  your  office 


2001 


Compaq  Evo  Notebook 
N600c 


$2,799 


Lease  for  as  low  as  $94 


•  Award-winning  integrated  wireless 
solution  via  MultiPort  technology 

•  Extended  battery  life  through  hot-swap 
battery  capability 

•  Mobile  Intel®  Pentium®  III  Processor 
1.20GHZ-M 

•  14"  CTFT  SXGA+  and  32MB  DDR  Video 


Memory 

•  MultiPort  Wireless  Capable 

•  MultiBay  DVD-ROM/CD-RW  Combo  Drive 

•  Dual  Battery  Support 

•  30GB  Hard  Drive 


•  256MB  SDRAM,  1024MB  max 

•  56k  V.90  Modem  +  10/100  NIC 

•  3-year  limited  warranty* 


Compaq  ProLiant  Compaq  Evo  D500 

DL380  Server  Ultra-Slim  Desktop 


$3,528 


Lease  for  as  low  as  $118 


•  Intel®  Pentium®  III  Processor  1.26GHz 

•  256MB  Total  SDRAM  133MHz 
(2x128)  —  Included 

•  Integrated  Smart  Array  5i  Controller 

•  Hot  Plug  Drive  Cage-Ultra3  (5  x  1" 
and  1  x  1.6") 

•  18.2GB  Pluggable  Ultra3  SCSI  10,000 
rpm  Hard  Drive  (1") 

•  Standard  Quick  Deployment  Rails 

•  SmartStart  &  Compaq  Insight  Manager 

•  3-year  limited  warranty1 


$699 


Lease  for  as  low  as  $24 


•  Integrated  MultiPort  wireless  and 
MultiBay  (optional)  technologies  in  a 
very  small  form  factor 

•  Pre-failure  replacement  warranty  on 
hard  drives 

•  Hot-swap  MultiBay  technology 
provides  synergy  with  notebooks 

•  Optional  MultiBay  24X  CD-ROM  Drive 

•  Intel®  Celeron®  Processor  1.30GHz 

•  128MB  SDRAM,  512MB  max 

•  20GB  Ultra  ATA/100  Hard  Drive 

•  Integrated  Intel®  Pro/100  NIC 

•  Limited  warranty  with  three  years 
parts,  labor  and  on-site  service* 

•  Monitor  not  included 


Compaq  Evo  Notebook 
N180 


$1,699 


Lease  for  as  low  as  $57 


Perfect  for  high-end  applications  and 
digital  video  editing 


•  Largest  viewing  display  in  a  Compaq 
notebook 

•  Mobile  Intel®  Pentium®  III  Processor 
l.OOGHz-M 

•  15"  CTFT  XGA  and  16MB  DDR  Video 
Memory 

•  DVD-ROM  Drive 

•  20GB  Hard  Drive 

•  256MB  SDRAM,  1024MB  max 

•  56k  V.92  Modem  +  10/100  NIC 

•  1-year  limited  warranty1 


Compaq  PCs  use  genuine  Microsoft®  Windows® 
www.microsoft/piracy/howtotell 

Prices  reflect  current  Internet  list  pricing  at  time  of  printing  and  are  subject  to  change.  'The  Compaq  iPAQ  H3835  Pocket  PC  is  a  retail  model  that  is  feature  equivalent  to  the  iPAQ  H3850  Pocket  PC  commercial  model.  "1  Lease  products 
available  through  Compaq  Financial  Services  Corporation  (CFSC)  to  qualified  commercial  customers  in  the  U.S.and  are  subject  to  credit  approval  and  execution  of  standard  CFSC  documentation.  Monthly  lease  payments  are  based  on 
48-month  lease  term,  and  do  not  include  taxes,  fees  or  shipping  charges.  Lessee  has  the  option  to  purchase  the  equipment  at  the  end  of  the  lease  term  at  its  then  fair  market  value  (FMV).  Other  fees  and  restrictions  may  apply.  CFSC 
reserves  the  right  to  change  or  cancel  this  program  at  anytime  without  notice,  la  0%  lease  offer  is  a  lease  with  a  fair  market  value  purchase  option  at  the  end  of  the  lease  term.  The  monthly  lease  payments  are  calculated  at  a  0% 
implicit  lease  rate,  assuming  the  lessee  does  not  exercise  the  purchase  option  at  the  end  of  the  lease  term  and  timely  return  of  the  leased  equipment  to  CFSC  at  the  end  of  the  lease  term  and  disregarding  any  charges  payable  by  lessee 
other  than  rent  payments  (such  as  taxes,  fees  and  shipping  charges).  Lease  terms  of  up  to  30  months  are  available  for  qualifying  transactions  above  $499.  Cost  of  operating  system  software  and  Compaq  Services  qualify  for  special 
financing  rates.  Some  product  restrictions  may  apply.  Other  restrictions  may  apply.  This  offer  is  valid  through  June  28, 2002.fCertain  restrictions  and  exclusions  apply.  Consult  the  Compaq  Customer  Support  Center  for  details.  All  prices 
subject  to  change  without  notice.  Compaq,  the  Compaq  logo,  Evo,  ProLiant  and  iPAQ  are  trademarks  of  Compaq  Information  Technologies,  L.P.  in  the  U.S.  and  other  countries.  Intel,  the  Intel  Inside  logo,  Pentium,  and  Celeron  are 
trademarks  or  registered  trademarks  of  Intel  Corporation  or  its  subsidiaries  in  the  United  States  and  other  countries.  Other  products  mentioned  herein  may  be  trademarks  of  their  respective  companies.  Compaq  is  not  liable  for  editorial, 
pictorial  or  typographical  errors  in  this  advertisement.  ©2002  Compaq  Information  Technologies,  LP. 
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WHAT  MAKES  COMPAQ  TECHNOLOGY  SO  VALUABLE? 

ASK  THE  CRITICS. 

What  makes  a  best  buy?  How  about  advanced  technology, 
practical  versatility,  responsive  technical  support.  And  those 
are  just  a  few  of  the  many  qualities  that  put  Compaq  at  the 
top  of  every  shrewd  purchaser’s  list. 

Compaq  CarePaq  Services  provide  a  variety  of  upgrades  to 
enhance  the  base  warranty  on  your  Compaq  products. 

Lease  for  $0  down,  0%  interest  monthly.** 


Compaq  ProLiant  ML350  Compaq  Evo  D300v 
Server  Microtower 


Compaq  iPAQ  H3850 
Pocket  PC 


$2,428 


Lease  for  as  low  as  $81 


Provides  the  perfect  balance  of  price  and 
performance 


•  Intel®  Pentium®  III  Processor  1.26GHz 

•  128MB  Total  SDRAM  133MHz 
(1x128)  —  Included 

•  Integrated  Dual  Channel  Wide-Ultra3 
SCSI  Adapter 

•  Hot  Plug  Ultra3  Cage  6  xl"  Cage  —  Included 

•  18.2GB  Pluggable  Ultra3  SCSI  10,000  rpm 
Hard  Drive  (1") 

•  SmartStart  &  Compaq  Insight  Manager 

•  3-year  limited  warranty* 


$569 


Lease  for  as  low  as  $19 


Affordable  business  computing  solution 


•  Intel®  Celeron®  Processor  1.30GHz 

•  48X  CD-ROM  Drive 


•  128MB  SDRAM,  512MB  max 

•  20GB  Ultra  ATA/100  Hard  Drive 

•  Integrated  Intel®  Pro/100  NIC 

•  Microsoft®  Windows®  XP  Professional 

•  Limited  warranty  with  one  year  parts,  labor 
and  on-site  service1 

•  Monitor  not  included 


$599 


Lease  for  as  low  as  $20 


•  206MHz  Intel®  StrongARM  Processor 
SA-1110  32-bit  RISC 

•  64MB  SDRAM,  32MB  Flash  ROM  Memory 

•  Reflective  TFT  Display  with  64K  colors 

•  Built-in  secure  digital  slot  for  memory 
expansion 

•  Microsoft®  Pocket  PC  2002  Operating 
System  with  Pocket  Outlook  and 
Pocket  Office 

•  Handwriting  recognition,  virtual 
keyboard,  character  recognition 

•  1-year  limited  warranty1 


For  latest  pricing  and  availability,  call  toll  free 

Buy  direct  from  Compaq  at  888-349-5570, 
compaq.com/awardwinning/cio, 
or  visit  your  local  reseller. 
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Creating  Value  Online 


Putting  the 
Horse  First 


B2B  exchanges  failed  because  they 
got  their  business  model  backward 

BY  MOHANBIR  SAWHNEY 

JUST  TWO  YEARS  AGO,  business  -to-business  trading  exchanges  were 
the  rage.  Experts,  including  myself,  waxed  eloquent  about  the 
potential  of  B2B  exchanges  to  act  as  hubs,  connecting  buyers 
and  sellers  in  electronic  marketplaces.  Of  course,  we  were  all 
very  wrong.  The  B2B  boom  quickly  went  bust  as  investors 
started  asking  inconvenient  questions  about  the  viability  of  the 
business  model.  Now,  most  B2B  exchanges  are  either  dead  or 
on  life  support.  One  might  conclude  from  the  evidence  that 
the  idea  of  a  B2B  exchange  is  fundamentally  flawed.  However, 
it’s  not  the  concept  of  the  exchange  that  is  flawed  but  the  exe¬ 
cution  of  that  concept. 

At  the  root  of  the  failure  of  B2B  exchanges  is  the  fact  that 
their  founders  put  the  cart  before  the  horse.  Their  logic  seemed 
elegant:  create  marketplaces  that  would  match  buyers  and  sell¬ 
ers,  bringing  improved  liquidity,  efficiency  and  transparency  to 
B2B  transactions,  and  make  money  through  transaction  fees 
from  the  trades.  Once  the  buyers  and  sellers  were  on  board  to 
conduct  transactions,  the  exchanges  could  augment  that  core 
functionality  with  value-added  services  such  as  logistics  man¬ 
agement,  credit  and  settlement,  and  supplier  verification. 
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But  getting  an  exchange  off  the  ground  requires  a  minimum 
level  of  liquidity,  and  getting  that  liquidity  requires  solving  the 
classic  chicken-and-egg  problem.  If  you  don’t  have  a  critical  mass 
of  buyers,  how  do  you  attract  suppliers?  And  if  you  don’t  have 
most  of  the  suppliers,  why  would  buyers  participate?  Most  B2B 
exchanges  failed  because  they  could  not  get  past  that  first  hurdle. 
Suppliers  resisted  joining  the  exchanges  because  they  feared 
direct  comparison  with  competitors  would  erode  their  margins. 
And  buyers  as  well  as  sellers  were  loath  to  pay  transaction  fees 
for  what  they  felt  was  a  simple  matchmaking  function. 

But  the  struggle  for  liquidity  is  merely  a  symptom  of  the  real 
problem,  which  is  that  the  creation  of  exchanges  to  match  buy¬ 
ers  and  sellers  preceded  the  creation  of  software  and  services 
that  would  make  exchanges  truly  useful.  That  amounted  to  put¬ 
ting  the  cart  before  the  horse.  B2B  exchanges  should  have 
begun  by  solving  a  focused  business  problem  one  customer  at 
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Nextel  Wireless  Business  Solutions.  Now  you’ll  never  have  to  say  “Imagine  what  I  could  have 
done  if...”  because  you’ll  be  busy  doing  it.  And  it’s  not  just  having  the  Internet  on  your  phone; 
it’s  real-time  access  to  customer  data,  pricing,  inventory.  Whatever  drives  your  business. 
Anytime.  Anywhere.  On  a  variety  of  devices.  And  it’s  all  possible  because  only  Nextel  has  a 
national  wireless  network  designed  specifically  to  carry  both  voice  and  data.  Call  toll  free 
1  -877-NEXTELC,  or  visit  nextel.com/WBS  to  see  how  we  can  help  you  outmaneuver  your  competition. 
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a  time.  That  approach  means  that  exchanges  will  need  to  do 
much  more  than  merely  facilitating  transactions,  which,  after 
all,  involve  far  more  than  a  simple  purchase  or  sale.  Most  B2B 
interactions  involve  intense  collaboration  on  planning,  fore¬ 
casting,  design  and  problem  solving.  The  real  problem  that 
enterprises  face  is  not  in  finding  new  suppliers  or  buyers.  Rather, 


it  is  in  improving  the  efficiency  and  effectiveness  of  the  processes 
by  which  they  interact  with  existing  suppliers  and  partners. 
Those  processes  start  deep  within  the  enterprise  and  extend  out¬ 
ward  to  customers,  suppliers  and  channel  partners. 

In  time,  a  new  breed  of  software  and  solutions  companies 
will  emerge  to  automate  and  redesign  specific  inter-enterprise 
business  processes.  As  these  new  companies  develop  a  solid  base 
of  customers,  they  can  then  start  connecting  those  customers 
with  suppliers  to  create  a  marketplace.  By  that  point,  most  of 
the  suppliers  and  buyers  would  be  on  the  same  platform,  and 
it  would  be  easy  and  useful  to  connect  them. 

Solving  the  Right  Problem 

Some  B2B  exchange  companies  are  getting  the  message  and 
have  repositioned  themselves  as  enterprise  software  and  services 
companies.  They  are  de-emphasizing  their  market-making  func¬ 
tions  and  strengthening  their  process-enablement  functions. 
Consider  Celarix,  a  Boston-based  startup  founded  in  1998  by 
two  of  my  former  students.  Celarix  operates  in  the  area  of  col¬ 
laborative  logistics.  In  its  early  days,  the  founders  debated  what 
Celarix  should  look  like  when  it  grew  up.  They  realized  that 
the  company  could  emphasize  two  general  areas  in  its  busi¬ 
ness:  An  exchange  that  would  match  logistics  vendors  with  their 
Global  2000  customers,  and  software  that  would  allow  enter¬ 
prises  to  streamline  their  global  logistics  by  monitoring  all  their 
transportation  vendors  and  shipments  in  one  place.  Two  years 
ago,  Celarix  felt  that  the  logistics  marketplace  was  the  more 
attractive  opportunity.  But  reality  lay  in  the  other  direction. 
The  company  now  focuses  on  selling  software  and  services  like 

systems  integration,  trad¬ 
ing  partner  verification 
and  transportation  con¬ 
tract  administration.  Cel¬ 
arix  now  sees  the  logistics 
marketplace  as  a  byprod¬ 
uct  of  the  software  and 


solutions  business,  and  not  its  main  focus. 

Instill,  a  California-based  B2B  startup,  which  I  advise,  learned 
the  same  lesson.  Instill  provides  supply  chain  solutions  for  food 
service  industry  giants  like  Sodexho  Marriott,  Subway  and  Tricon. 
Two  years  ago,  Instill  felt  that  it  could  create  a  lucrative  purchasing 
hub  called  Foodscape  that  would  allow  transactions  between  food 
service  providers  and  suppliers.  Today,  Instill 
sells  supply  chain  management  software  and 
related  services  to  food  service  providers. 
Its  software  solution  includes  procurement 
management,  analytics  for  purchasing  man¬ 
agement,  contract  management  and  collab¬ 
orative  planning.  Instill  looks  a  lot  more  like 
a  software  company  than  a  marketplace. 

There  are  business  processes  besides  procurement  that  can  be 
enabled  by  B2B  software.  Consider  marketing  and  new  product 
development,  which  have  been  largely  untouched  by  the  enterprise 
software  revolution.  A  host  of  exciting  new  companies  are  creating 
software  and  services  for  improving  these  processes.  In  the  area 
of  enterprise  marketing  automation,  companies  such  as  Aprimo, 
Emmperative,  Kickfire  and  Notara  are  building  platforms  that 
allow  marketing  executives  to  plan  and  analyze  the  results  of 
their  marketing  programs,  allocate  budgets  and  implement  cam¬ 
paigns.  In  the  area  of  new  product  development,  companies  such 
as  MS2  are  helping  product  management  teams  automate  the 
process  of  defining,  designing  and  marketing  new  products.  Tike 
the  companies  that  focus  on  supply  chain  management  and  pro¬ 
curement,  these  startups  are  tackling  a  specific  business  process 
to  enable  collaboration — not  transactions — and  selling  their 
products  to  individual  enterprises— -not  entire  industries. 

Amid  the  gloom  and  doom  that  permeates  the  B2B  tech¬ 
nology  world,  I  see  rays  of  light  from  a  new  generation  of  com¬ 
panies  that  has  learned  a  basic  lesson:  The  future  of  B2B  e- 
commerce  lies  not  in  exchanges  but  in  software  and  solutions 
that  bring  real  efficiencies  to  specific  business  processes.  The 
business  of  trading  exchanges  populated  by  anonymous  buy¬ 
ers  and  sellers  is  best  left  to  financial  exchanges  and  commodi¬ 
ties  traders  because  only  pure  commodities  can  be  bought  and 
sold  in  marketplaces.  As  the  founder  of  Dean  Witter  used  to  say, 
“We  build  success  one  investor  at  a  time.”  Similarly,  B2B  com¬ 
panies  will  build  their  business  one  customer  at  a  time,  instead 
of  building  marketplaces  with  no  customers.  QE1 


What  is  your  company  doing  about  B2B  marketplaces  and  solutions? 
Write  to  netgains@cio.com.  Mohanbir  Sawhney  is  the 
McCormick  Tribune  professor  of  e-commerce  and 
technology  at  Northwestern  University's  Kellogg 
School  of  Management  and  a  fellow  at  Diamond- 
Cluster  International.  He  can  be  reached  at  mohans@ 
nwu.edu. 


The  creation  of  exchanges  to  match  buyers  and 
sellers  preceded  the  creation  of  software  and 
services  that  would  make  exchanges  truly  useful 
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Faster  deployment 

Your  choice  of  wireless  carrier  matters!  CDMA 
carriers  are  the  first  to  market  with  fully  standard¬ 
ized,  commercial  3G  networks  and  devices — 
long  before  other  wireless  carriers.  By  choosing 
a  CDMA  carrier,  you  can  leverage  the  real  and 
practical  advantages  of  3G  CDMA  today ,  and 
avoid  the  pitfalls  of  a  costly  and  complex  wireless 
network  and  device  migration  path. 

Faster  network  throughput 

Today’s  3G  CDMA  networks  provide  peak  rates 
up  to  144  kbps.  But  more  importantly,  they 
provide  real  throughputs  of  up  to  60-90  kbps, 
enabling  many  applications  that  were  never  before 
practical  over  a  wireless  wide  area  network  (WAN). 

More  device  choices 

With  our  industry-leading  chipset  and  software 
solutions,  QUALCOMM  is  enabling  the  rapid 
development  of  3G  devices  by  dozens  of  leading 
manufacturers  worldwide.  This  includes  PCMCIA 
cards  with  WAN  access  at  up  to  60-90  kbps 
for  enterprise  data  applications  such  as  e-mail, 
customer  relationship  management  and  sales 
force  automation.  Phones  and  PDAs  with  low- 
latency  browsing,  color  displays,  and  increased 
capabilities  for  position  location  and  enhanced 
wireless  multimedia  are  also  commercially  available. 
(See  www.3Gtoday.com  for  more  details.) 

Faster  development 

QUALCOMM  has  created  an  open  applications 
platform  called  the  Binary  Runtime  Environment 
for  Wireless™  (BREW™)  that  supports  native  C/C++ 
and  Java™  applications,  enabling  developers  to 
extend  enterprise  applications  quickly  and  easily. 
BREW  also  lets  you  download  and  update  applica¬ 
tions  directly  to  the  user’s  device  for  better  software 
management  and  control. 

Faster  decisions 

Our  mobility  experts  at  Wireless  Knowledge  deliver 
strategic  mobility  solutions  that  leverage  existing 
investments  while  harnessing  the  technical  and 
competitive  advantages  provided  by  today’s  3G 
wireless  technologies.  By  extending  critical  corpo¬ 
rate  applications  to  mobile  devices,  business 
professionals  are  empowered  to  make  informed, 
financially  justified  decisions  to  drive  their  business. 


As  president  of  QUALCOMM'S  wireless  &  internet  Group, 
Dr.  Paul  Jacobs  has  a  unique  perspective  on  third-generation 


Faster  ROI 

From  improved  productivity  and  responsiveness 
to  better  logistics  and  customer  relationship 
management,  the  benefits  of  corporate  data 
mobility  are  more  compelling  now  than  ever.  Visit 

www.qualcomm.com/enterprise  to  learn  more. 


(3G)  networks,  devices  and  applications.  How  will  3G  drive 
new  advances  in  enterprise  mobility? 


Qualco/ww 
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Now  the  left  hand 
knows  what  the  right 
hands  are  doing. 
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Introducing  Microsoft  Project  Server  2002,  the  newest  way  to  manage  your  enterprise  projects  at  every 

organizational  level.  Today’s  complex  projects  have  grown  to  encompass  multiple  departments,  organizations,  and 
geographies,  which  means  visibility  and  collaboration  are  more  essential  than  ever.  Part  of  the  Microsoft®  .NET 
family  of  servers,  Microsoft  Project  Server  2002  works  with  Microsoft  Project  Professional  2002  to  help  you  manage 
resources  and  model  projects  across  your  portfolio.  Web-based  access  to  project  information  keeps  everyone  in  the 
loop,  at  any  time  and  from  anywhere.  And  the  open  architecture  in  Microsoft  Project  Server  2002  allows  you  to  deploy 
a  customized,  secure,  enterprise-scale  project-management  solution  that  integrates  with  your  current  business 
systems.  So  even  when  there  are  lots  of  hands  on  the  job,  they’re  still  of  one  mind. 

Find  out  how  Microsoft  Project  Server  2002  can  help  you  manage  projects  across 
your  organization.  Go  to  goprojectserver.com  Software  for  the  Agile  Business. 
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Field-Tested  Ideas  from  CIOs  for  CIOs 


Treadmill  to 
Nowhere 

Are  you  too  busy  to  take  a  summer  vacation?  If  so, 
it’s  time  to  figure  out  what  you're  doing  wrong. 

BY  GEORGE  TOMKO 

I  RECENTLY  RETURNED  to  work  after  a  three-week  absence.  No,  I 
wasn’t  sick,  nor  had  I  checked  myself  into  an  insane  asylum.  I 
was  on  a  planned  family  vacation.  Remember  those?  I  know 
it’s  hard  to  imagine,  but  I’m  a  CIO  who  actually  found  time 
to  both  plan  and  take  a  trip.  What’s  more,  I  was  able  to  relax 
completely,  confident  in  the  knowledge  that  I  had  left  the  IT 
department  functioning  smoothly  during  my  time  off. 

I’d  like  to  share  with  you  some  ideas  that  will  get  you  back 
on  the  beach  and  at  the  same  time  make  you  a  more  valuable 
member  of  your  organization’s  executive  team.  After  all,  you 
can’t  take  a  vacation  unless  your  IT  is  in  order. 

Down  to  Business 

As  CIOs,  we  know  our  raison  d’etre  is  to  help  our  company 
reach  its  business  objectives  through  the  use  of  information 
technology.  The  problem  is,  too  often  the  technology  gets  out  of 
our  control.  The  results  are  twofold.  First,  we  spend  all  of  our 
time  fixing  technology  issues,  and  second,  our  title  gets  tar¬ 
nished.  In  the  eyes  of  our  fellow  top  brass  we  are  reduced  to  Mr. 
Fix-It,  and  we’re  too  preoccupied  putting  out  fires  to  be 
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involved  in  important  business  decisions. 

Avoiding  that  fate  isn’t  so  difficult.  A  good  place  to  start  is 
relearning  the  business  of  your  company.  I  work  for  a  manu¬ 
facturer  of  phosphate  products  used  in  a  wide  variety  of  goods, 
from  foods  to  cleaning  products  and  pharmaceuticals.  Although 
the  actual  creation  of  those  products  relies  very  little  on  the  IT 
my  department  provides,  I’ve  obliged  myself  to  understand  their 
processes.  Toward  that  end,  I’ve  immersed  myself  not  only  in 
the  technology  but  also  in  the  company.  For  example,  when 
we  implemented  SAP  across  the  enterprise,  I  volunteered  to 
work  nights  and  some  weekends  at  our  largest  distribution 
center,  assisting  in  inventory  and  warehouse  management  activ¬ 
ities  such  as  cycle  counting  and  reconciliations.  The  result  is  that 
I  now  have  a  much  better  understanding  of  the  needs  of  par¬ 
ticular  departments  in  relation  to  what  they  are  aiming  to 
accomplish.  With  firsthand  knowledge  of  the  processes  and 
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Network  INTERRUPTION 


vs.  Network  CONTINUITY 


If  your  network  goes  down,  your  business  goes 
down.  And  suddenly  you're  going  nowhere  fast.  At 
Genuity,  we've  made  it  our  mission  to  help  ensure 
that  never  happens. 

With  Genuity's  Black  Rocket  Voice,  "voice  and 
data  are  combined  on  a  single,  secure  IP  network.  Providing 
failover  support  to  your  existing  PBX  telephone  system.  And 
reducing  the  risk  of  downtime  as  the  result  of  planned  or 
unplanned  disruptions.  It's  a  smart  alternative  to  traditional 
switched  and  dedicated  long  distance  services. 


But  technology  is  only  part  of  the  story.  You  need  the  right 
people,  too.  At  Genuity,  our  experts  will  work  with  you  to  help 
ensure  the  continuity  of  your  business  by  planning  for  the 
unexpected.  We  can  assess  the  security  of  your  entire  Web 
infrastructure  to  identify  vulnerabilities  and  mitigate  day-to-day 
risks.  And  we  can  monitor  and  maintain  your  network  24x7x365 
to  reduce  the  likelihood  of  unplanned  network  failures. 

For  further  information  call  1-800-GENUITY  or  visit  us  at 
www.genuity.com/continuity. 

And  keep  things  rolling. 


GENUITY 


Peer  to  Peer 


issues  in  the  distribution  centers,  for  example,  I’ve  been  able  to 
effectively  implement  and  participate  in  resolutions  to  startup 
problems,  working  side-by-side  with  my  business  colleagues. 

Once  you  understand  the  business,  start  learning  the  com¬ 
pany’s  short-  and  long-term  goals.  That  means  making  choices 
between  the  slick  demos  that  your  favorite  vendors  invite  you  to 
attend  and  the  regular  staff  meetings  of  your  key  internal  groups 
such  as  manufacturing,  sales  and  so  on.  I  find  it  easier  to  occa¬ 
sionally  excuse  myself  from  business  meetings  to  take  part  in 
vendor  and  technology  interactions  than  vice  versa — but  tech¬ 
nology  interests  need  to  take  a  backseat  to  business  imperatives. 
That  business  perspective  will  provide  the  framework  for  every 
IT  decision  you  ever  have  to  make.  In  the  vendor  and  technol¬ 
ogy  exploration  process,  for  example,  you’ll  be  better  able  to 
match  technology  promise  with  business  need  or  opportunity. 


With  a  good  understanding  of  business  objectives,  you  can 
evaluate  and  implement  an  effective  enterprise  technology  plat¬ 
form.  That  may  sound  easy  enough,  but  many  of  us  get  side¬ 
tracked  there.  Instead  of  selecting  and  implementing  technolo¬ 
gies  we  know  intimately,  we  tend  to  give  in  to  our  technology 
cravings,  spending  a  disproportionate  amount  of  time  and 
money  evaluating  new  applications,  operating  systems  and 
hardware.  Don’t  get  wrapped  up  in  that  never-ending  cycle. 
Your  time,  expertise  and  energy  are  better  used  elsewhere.  I  sug¬ 
gest  sticking  with  the  best-of-breed  products  you’ve  used  suc¬ 
cessfully  in  the  past,  “changing  horses”  only  if  there  are  com¬ 
pelling,  long-term  issues  that  mandate  change  (and  purchase 
price  seldom  qualifies  as  such  a  reason). 

Along  those  lines,  also  concentrate  on  implementing  an  IT 
platform  that  is  reliable  and  can  quickly  adapt  to  the  com¬ 
pany’s  changing  needs.  That  way,  when  your  CEO  comes  to 
you  and  says  a  potential  client  requires  electronic  billing  and 
invoicing,  you  can  put  him  at  ease  that  an  infrastructure  is  in 
place  that  can  accommodate  those  specific  requirements. 

Next,  you  can  turn  your  attention  to  utilizing  your  limited 
human  capital.  The  first  step  is  recognizing  where  you  could  use 
some  expertise  to  improve  your  total  offering.  Where  I  work  I 
realized  that  we  didn’t  have  the  expertise  to  run  and  host  our 
critical  SAP  applications  internally,  so  I  turned  to  an  outside 
provider.  Of  course,  that’s  easier  said  than  done.  Selecting  the 
right  IT  services  provider  is  where  CIOs  must  exercise  disci¬ 


pline,  diligence  and  business  acumen.  Make  sure  you  meet  with 
the  vendor  multiple  times  prior  to  signing  a  contract  to  observe 
their  technicians  in  action  and  make  certain  you  get  along  with 
and  respect  their  executive  team  outside  of  the  business  rela¬ 
tionship.  Ask  to  see  their  entire  customer  list  instead  of  the  few 
selected  references  that  they  may  provide.  Speak  to  as  many  of 
those  customers  as  possible,  especially  the  ones  in  your  industry. 
Specifically  look  for  cases  where  something  went  wrong,  and 
focus  on  how  the  vendor  handled  the  resolution.  In  doing  so 
you’ll  improve  the  chances  of  a  successful  partnership. 

The  Bigger  Picture 

With  this  well-designed  and  well-staffed  IT  organization,  a 
whole  new  world  opens  up  to  you.  You  have  more  room  and 
time  to  focus  on  bigger  issues,  and  you  come  to  realize  that 

the  technology  is  actually  only  the  means 
by  which  you  and  your  company  can 
accomplish  its  objectives. 

After  recovering  from  the  initial  shock 
of  not  having  to  worry  about  every 
minuscule  operational  issue,  I  was  ready 
to  move  on  and  be  part  of  something 
more  relevant — namely,  focusing  my 
efforts  on  making  the  company  a  suc¬ 
cess.  The  first  time  that  shift  became  clear  to  me  was  during  a 
meeting  in  which  I  was  articulating  the  vision  of  an  IT  project. 
Rather  than  drawing  a  detailed  diagram  with  layers  of  tech¬ 
nologies  and  lines  connecting  them,  I  drew  a  simple  solid  box. 
That  box  represented  an  entire  IT  system.  I  was  no  longer 
bogged  down  with  worries  about  integrating  particular  systems; 
instead,  I  was  beginning  to  see  the  infrastructure  as  a  utility 
available  to  me  to  provide  services  as  needed.  I  was  no  longer 
thinking  like  a  tech-weenie  who  maintained  the  technology 
but  rather  as  a  business  leader. 

I  wasn’t  the  only  one  who  noticed  the  change — so  did  other 
members  of  the  executive  team.  In  time,  they  were  seeking  my 
advice  on  other  business  issues,  not  just  IT. 

It  didn’t  all  happen  overnight,  of  course.  But  if  you  can 
understand  the  company’s  goals,  assemble  a  flexible  IT  plat¬ 
form  and  find  focused  outside  providers,  you’ll  become  a 
CIO  who  is  part  of  the  bigger  picture.  Then  you’ll  be  able  to 
exercise  your  business  acumen  and  balance  your  technology 
cravings — not  to  mention  having  a  lot  more  time  to  enjoy  that 
family  vacation.  BE] 


Do  you  have  ideas  to  share  with  fellow  CIOs?  Send 
them  to  letters@cio.com.  George  Tomko  is  CIO  of 
Astaris,  a  joint  venture  company  owned  by  FMC  and 
Solutia.  Astaris  is  a  supplier  of  phosphorus  chemi¬ 
cals,  phosphoric  acid  and  phosphate  salts. 


You’ll  have  to  choose  between  the  slick  demos  that 
your  favorite  vendors  invite  you  to  attend  and  the 
regular  staff  meetings  of  your  key  internal  groups. 
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When  your  business  is  online,  sealed  documents,  signatures  and  handshakes  no  longer  work. 

Let  RSA  Security  bring  authenticity  to  your  e-business. 
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ORDERS  ABE 

ON  TIME. 
EVERYONE’S 

IN  THE  LOOP 

CUSTOMERS 

ARE  HAPPY. 

(AN  ADAPTIVE  SUPPLY  CHAIM 

IS  A  BEAUTIFUL  THING.) 


A  business  is  a  jigsaw  puzzle  of  people,  products  and  processes.  And  because 
it’s  constantly  in  flux,  it’s  hard  to  predict  what,  when.  The  mySAP”'  Supply  Chain 
Management  Solution  connects  you  with  your  customers,  partners  and  suppliers,  so 
you  can  adapt  on  the  fly  to  shifts  in  supply  and  demand.  It  also  offers  higher  visibility 
and  covers  all  the  bases  —  from  planning  and  execution  to  networking  and 
coordination.  Which  makes  it  the  only  adaptive  SCM  solution  that  can  turn  a  supply 
chain  into  a  profit  center.  To  find  out  how  you  can  optimize  your  supply  chain,  go 
to  sap.com/scm 
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Toy  Story 

Mattel  CIO  Joe  Eckroth  used  a  tough  but  tender  management 
style  to  help  lead  the  toy  maker's  turnaround 
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The  worth  of  weilness  programs 
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Susan  H.  Cramm  answers 
questions  on  strategy  workouts, 
corporate  politics  and  more 

Ask  her  your  leadership  and 
management  questions  at 
www.  cio.  com/leadership/ 
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How  comfortable  do  you 
find  the  hot  seat?  E-mail 
Leadership  and  Management 
Editor  Edward  Prewitt  at 
hotseat@cio.com. 


BY  STEPHANIE  OVERBY 

Joe  Eckroth  says  that  he  was  instrumen¬ 
tal  in  Mattel’s  success  long  before  he 
became  the  toy  company’s  CIO  in  August 
2000.  He  estimates  that  over  the  years 
he  has  bought  hundreds  of  dollars’  worth 
of  Barbie  dolls  for  his  girls,  now  ages  1 1 
and  16. 

Eckroth ’s  joke  contains  more  than  a 
grain  of  truth.  Long  before  he  joined  the 
troubled  company,  Eckroth  was  honing 
the  management  skills — an  ability  to 
make  tough  decisions  coupled  with  an 
awareness  of  the  need  to  take  care  of  peo¬ 
ple — that  have  made  him  a  key  player  in 
the  attempted  turnaround  of  Mattel,  the 
world’s  largest  toy  company. 

“Joe  is  that  unique  combination  of 
tough-minded  and  tender,”  says  Chair¬ 
man  and  CEO  Bob  Eckert,  who  made 
Eckroth  his  first  new  hire  after  taking  the 
reins  in  May  2000.  “He  makes  decisions 
very  clearly,  and  he’s  not  at  all  soft  when 
it  comes  to  what  needs  to  be  done.  But  he 
is  soft  in  understanding  situations  from 
an  individual  employee’s  point  of  view.” 

Eckroth  came  to  Mattel  from  that  cra¬ 
dle  of  CIOs,  General  Electric.  When  a 
headhunter  called  him  two  years  ago 
about  the  Mattel  opening,  both  the  prod¬ 
ucts  and  problems  piqued  Eckroth’s 
interest.  “I’m  a  big  kid,  and  this  was  a 
product  I  could  totally  relate  to,”  laughs 
Eckroth,  who  is  43.  But  the  company 
had  as  many  troubles  as  toys — it  was  los¬ 
ing  market  share,  gross  margins  and 
profitability  were  declining,  overhead 
expenses  were  rising,  the  stock  price  and 
morale  were  at  all-time  lows,  and  an  ill- 
advised  acquisition  was  dragging  the 
company  further  under. 

But  after  a  trip  to  the  company’s  El 
Segundo,  Calif.,  headquarters  to  meet 


with  Eckert,  Eckroth  decided  that  he  was 
up  for  the  challenge.  “What  I  saw  was  an 
extremely  creative,  fast-paced  company  in 
a  world  I  had  never  played  in  before,”  he 


CIO  ioe  Eckroth  has  brought  discipline 
and  GE  management  methods  to  a  troubled 
Mattel. 


says.  “It  was  exciting.”  Eckert  sweetened 
the  deal  with  a  few  collector’s  edition 
Barbies,  board  games  and  Matchbox  cars 
for  him  to  take  home,  and  Eckroth 
became  the  new  CEO’s  right-hand  man. 

When  I  Grow  Up  I  Want  to  Be... 

When  Eckroth  began  his  career  as  an 
engineer,  his  thoughts  weren’t  so  much 
on  what  he  wanted  to  be  but  who.  After 
receiving  an  MBA  from  Pepperdine 
University  in  1994,  he  worked  in  opera- 
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“TRENDS  IN  LARGE  DATA  CENTERS 
CANDID  INTERVIEWS 
WITH  300  TOP  IT  EXECUTIVES.” 


|;No  wonder  UNIX  makes  you  feel  boxed  in.  It  ties 
i  to  an  inflexible  system.  It  requires  you  to  pay  for 
expensive  experts.  It  makes  you  struggle  daily  with  a 
server  environment  that’s  more  complex  than  ever. 

Now  for  the  solution.  Microsoft  and  Unisys  have 
joined  together  to  offer  you  a  UNIX  alternative. 


By  teaming  the  Unisys  ES7000  server  with  the 
Windows®  2000  Datacenter  operating  system, 
we’re  bringing  a  high  performance  server  solution  to  the 
market.  A  solution  that  provides  the  flexibility 
agility  you  need  in  today’s  web-driven  world. 
Without  sacrificing  any  of  the  reliability  and  scalability 
you  demand. 


So,  if  your  server  environment  has  closed  you  in, 
let  us  help  you  escape.  Microsoft  and  Unisys. Two  smart 
companies,  one  brilliant  solution. 


Learn  more  about  how  the  ES7000  and  Windows 
2000  Datacenter  can  simplify  your  server  environment. 


Contact  us  for  your  free  copy  of 


www.WeHaveTheWayOut.com 
info@WeHaveTheWayOut.com 
Toll-free:  800-548-3443 
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tions  at  Los  Angeles- 
based  Northrop  Air¬ 
craft  (now  Northrop 
Grumman).  He  had 
no  immediate  plans  to 
get  into  IT  or  even  a 
long-term  goal  of  climbing  the  corporate 
ladder.  “I  didn’t  go  in  saying,  ‘Hey,  I  want 
to  be  a  top  executive.’  I  went  in  excited 
about  a  new  job,”  Eckroth  explains.  “But 
as  I  moved  through  jobs,  I  started  saying, 
‘OK,  I  want  to  be  that  person.’”  Among 
those  people  was  his  first  boss,  Vice 
President  of  Operations  Marion  McCue. 
“I  loved  him,”  says  Eckroth.  “He  was  a 
tough  manager,  but  he  was  always  a 
values-based  manager.  He  cared  about 
the  people  that  worked  for  him.” 

In  1993,  Eckroth,  then  the  functional 
IT  leader  in  the  operations  division,  was 
offered  the  CIO  job  at  Northrop’s  air¬ 
craft  division.  Although  he  hadn’t  been 
aiming  to  become  CIO,  Eckroth — who 
craves  change  and  has  never  stayed  in  the 
same  job  for  more  than  a  couple  of 
years — took  a  stab  at  it. 

Three  years  later,  he  left  Northrop  for 
General  Electric,  starting  as  CIO  for  GE 


Medical  Systems  and  now  Jack  Welch’s 
successor  as  head  of  GE.  “At  GE,  the  core 
values  were  such  that  you  couldn’t  just 
execute,  you  had  to  be  a  good  people 
manager.  There  were  great  examples  of 
that  everywhere,”  says  Eckroth.  “Jeff 
Immelt  knew  people’s  families.  He  had 
you  over  to  his  house.  He  put  a  lot  of 
stock  in  people.” 

While  Eckroth  continued  to  pick  up  on 
those  people  skills  espoused  by  his  own 
leaders,  he  also  grasped  the  importance 
of  thinking  on  his  feet  and  making  deci¬ 
sions  as  quickly  as  Welch  and  Immelt.  “I 
work  from  the  gut  a  lot,”  says  Eckroth, 
inadvertently  referencing  Welch’s  recent 
autobiography,  Jack:  Straight  from  the 
Gut.  “I  make  decisions  using  the  80-20 
rule,  and  I  like  to  move  aggressively.” 

It  wasn’t  the  promise  of  Barbies  or 
balmy  weather  that  convinced  Eckroth 
it  was  time  to  make  another  change  in 
his  career.  It  was  the  presence  of  Eckert, 
another  one  of  those  leaders  Eckroth 
could  look  up  to.  “He’s  got  a  very  quiet 
energy  about  him,”  says  Eckroth,  who 
tends  to  be  more  intense  and  assertive. 
“He  understands  the  power  of  people 


LESSONS  LEARNED 

Joe  Eckroth  on  Leadership 

■  Seek  mentors  and  emulate  great 

■  Balance  the  needs  of  the  company 

leaders 

with  concern  for  employees 

■  Make  decisions  quickly  and  firmly 

■  Get  to  know  individual  employees 

■  Act  on  good  information  rather  than 

personally 

waiting  for  perfect  knowledge 

■  Be  forthright  in  communicating 

■  Consider  the  effects  of  change  on 

change 

employees 

■  Welcome  and  pursue  employee 
feedback 

Industrial  Control  Systems  in  Plainville, 
Conn.,  then  switching  in  1998  to  CIO  of 
the  successful  GE  Medical  Systems  unit 
in  Madison,  Wis.  There  he  worked  with 
another  one  of  those  people  he  wanted 
to  be — Jeff  Immelt,  then  CEO  of  GE 


that  work  for  him,  and  he’s  able  to 
bring  them  together  toward  a  common 
vision.  And  you  wouldn’t  even  know 
he’s  the  CEO.  He  acts  like  just  another 
member  of  the  team.” 

As  for  Eckert,  he  saw  some  of  those 


same  people-pleasing  qualities  in  Eckroth. 
But  just  as  important,  he  knew  his  first 
hire  could  bring  one  thing  that  Mattel 
desperately  needed — discipline.  “This  has 
always  been  an  innovative,  fast-moving 
company,”  Eckert  says  of  Mattel,  which 
changes  80  percent  of  its  product  line 
every  year.  “But  I  saw  the  opportunity  to 
improve  the  discipline  here,  and  for  that 
we  needed  someone  like  Joe.” 

A  New  Place  to  Play 

The  combination  of  discipline  and  sensi¬ 
tivity  in  decision  making  has  been  the  hall¬ 
mark  of  Eckroth’s  year-and-a-half  tenure 
as  CIO,  as  the  company  has  moved  from 
tenuous  ground  to  turnaround.  Mattel 
returned  to  profitability  in  2001  after  two 
straight  years  of  net  losses,  and  the  com¬ 
pany’s  stock  price  recovered  from  a  low 
of  under  $10  in  2000  to  $21  per  share  in 
March  2002. 

As  part  of  the  senior  management 
team,  Eckroth  has  gone  far  beyond  the 
walls  of  IT  (where  he  completely  reor¬ 
ganized  the  600-person  global  IT 
department,  for  starters)  to  swiftly  set 
and  execute  new  strategies  for  the  toy 
manufacturer’s  recovery.  He  worked 
with  brand  managers  to  relaunch  prod¬ 
uct  websites.  He  initiated  a  “bullet 
train”  effort  (a  formula  used  at  GE  to 
cut  costs  by  15  percent  in  seven  of  a 
company’s  spending  categories)  with 
Mattel’s  CFO.  He  instigated  the  launch 
of  an  employee  performance  rating  sys¬ 
tem,  in  which  the  lowest  10  percent  of 
workers  are  actively  managed — another 
practice  imported  from  GE.  And  he 
spearheaded  formation  of  a  new  man¬ 
agement  training  center  and  an  institu¬ 
tionalized  development  program  for  all 
Mattel  employees. 

Eckroth  has  made  his  boss’s  priorities 
his  own.  Eckert  had  three  goals  from  the 
start:  Build  brands,  cut  costs  and  develop 
people.  “Joe’s  great  strength  is  that  he’s  a 
strong  player  in  each  of  those  efforts,” 
Eckert  says.  “What  he  does  is  way 
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beyond  normal  IT 
efficiency.  He’s  an 
initiator.  He  makes 
things  happen.  He’s  a 
much  faster  trigger 
than  I  am.” 

But  Eckroth  found  that  shaking  things 
up  as  a  self-described  “change  catalyst” 
was  initially  not  as  popular  with  the  gen¬ 
eral  Mattel  staff  as  it  was  with  Eckert. 
“There  was  a  lot  of  nervousness  and 
apprehension  with  people  wondering, 
Who  is  this  guy?”  Eckroth  recalls. 

Eckroth  worked  to  assuage  employee 
concern,  drawing  on  the  people  profi¬ 
ciency  he  developed  at  Northrop  and  GE. 
“When  you’re  trying  to  turn  a  company 
around,  it’s  not  just  shareholders  and 
numbers  that  you  need  to  be  concerned 
with,”  he  says.  “It’s  your  people.”  He 
eased  tensions  by  creating  an  open-door 
policy  for  any  employee,  IT  or  otherwise, 
who  wanted  to  talk.  “Actually  it’s  an 
open-door,  open-voice-mail,  open-e-mail 
policy,”  says  Eckroth,  who  peeks  over  and 
around  a  lot  of  cubicles  each  day  just  to 
say  hi  to  people.  “I’m  an  open  leader.” 

Eckroth  was  similarly  direct  with  his 
employees,  telling  them  what  changes 
were  taking  place  and  why.  “Change  was 
not  something  that  they  were  familiar 
with,  so  I  tried  to  keep  my  arms  around 
people,”  says  Eckroth.  “And  six  or  seven 
months  in,  they  began  to  get  more  com¬ 
fortable  with  it.” 

Eventually  the  IT  staff  began  to  see  the 
benefits  of  having  a  leader  so  involved  in 
the  companywide  transformation  that 
was  taking  place.  “I  had  developed  a  tight 
relationship  with  Bob  and  the  CFO,  and 
my  other  counterparts  here  early  on.  So 
IT  had  a  real  voice  in  the  business,  and 
that  began  to  show  to  the  IT  staff,” 
Eckroth  says. 


Toy  Story  2 

Eckroth  has  brought  discipline  and  GE 
management  methods  to  Mattel.  But 
Mattel  has  also  taught  him  an  important 


MANAGEMENT  BRIEFS 

Help  Employees  Help  Themselves 


The  Worth  of  Wellness 

Employee  assistance  programs 
(EAPs)  and  wellness  programs  can  be 
useful  tools  in  helping  your  workforce 
stay  on  track  during  uncertain  and 
anxious  times. 

EAPs  are  typically  part  of  a  com¬ 
pany’s  health  insurance  plan  and 
administered  by  the  HR  department. 
Their  services  include  short-term  indi¬ 
vidual  counseling,  written  materials 
on  health-  or  wellness-related  topics, 


and  in  some  cases  forums  for  employ¬ 
ees  to  discuss  issues  affecting  their 
well-being.  Wellness  programs,  on  the 
other  hand,  are  typically  volunteer 
organizations,  sometimes  supported 
financially  by  the  company.  Broadly 
defined,  their  focus  is  on  health 
education  and  promotion,  including 
such  activities  as  educational  forums, 
exercise  programs  and  lectures. 

Both  EAPs  and  wellness  programs 
have  been  important  in  helping 
employees  cope  with  the  uncertain 
climate  after  Sept.  11,  says  Thomas 
Guck,  psychologist  and  director  of 
behavioral  sciences  at  the  Creighton 
University  School  of  Medicine  in 
Omaha,  Neb. 

“The  thing  that’s  important  and 
unique  about  the  9/11  issue  is  that  it’s 


ongoing;  it’s  not  a  finite  thing  where 
you’re  dealing  with  a  flood  and  the 
problem’s  over  and  done  with  and 
people  get  on  with  their  lives,”  says 
Guck.  "EAPs  and  wellness  programs 
can  be  helpful  by  [making  partici¬ 
pants]  aware  of  how  these  things  are 
evolving  and  finding  the  right  balance 
between  helping  employees  be  vigi¬ 
lant  about  the  issues  and  getting  on 
with  their  lives.” 

Executives  play  an  important  role  in 
ensuring  that  their  employees  know 
about  these  resources,  Guck  says. 
“And  they  can  help  make  sure  that  no 
stigma  is  attached.  That  can  be  really 
important.” 

Coping  at  Cigna 

Andrea  Anania,  executive  vice  presi¬ 
dent  and  CIO  of  Cigna,  a  $19  billion 
insurance  company  based  in  Philadel¬ 
phia,  says  EAP-style  mental  health 
counseling  has  been  critical  in  helping 
her  employees  cope  in  the  wake  of  the 
Sept.  11  attacks. 

Cigna  has  a  business  division  that 
provides  employee  assistance  pro¬ 
grams  to  its  subscribing  companies. 
The  services  are  provided  free  of 
charge  to  Cigna  employees,  and  the 
company  has  been  making  sure  the 
services  have  been  used  in  the  past 
few  months.  “We’ve  had  seminars 
made  available  to  everyone  on  the 
premises,  and  we’ve  had  training 
sessions  with  managers  to  help 
identify  people  who  may  be  struggling 
and  to  encourage  them  to  attend  the 
counseling  sessions,”  says  Anania. 
“We’ve  definitely  seen  an  increase  in 
the  number  of  people  drawing  on 
these  services.” 

- Eric  Berkman 
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Hot 
Seat 


leadership  lesson: 
Respect  the  excep¬ 
tions  that  make  a 
company  unique. 
“When  I  came  to 
Mattel,  everyone  kept 
saying,  ‘The  toy  industry  is  just  different.’ 
And  I  would  say,  ‘It  isn’t  any  different 
than  other  industries,  you  just  make  it 
different,”’  recalls  Eckroth. 

A  year  later  he  realized  his  mistake. 
Several  factors  combine  to  make  toy¬ 
making  incredibly  complex:  the  cre¬ 
ativity  required  to  generate  successful 
toys,  huge  turnover  in  the  product  line, 
the  seasonality  of  sales  and  the 
dependence  on  the  most  fickle  of  audi¬ 
ences — kids.  “The  toy  industry  is  dif¬ 
ferent,  and  I  have  to  respect  that,  but 
the  business  can  benefit  from  some  dis- 


“Change  was  not 
something  that  they 
were  familiar  with,  so 
I  tried  to  keep  my  arms 
around  people.  And 
six  or  seven  months  in, 
they  began  to  get  more 
comfortable  with  it.” 

-Joe  Eckroth,  Mattel  CIO 


cipline,”  Eckroth  says.  “Now  that 
we’ve  recognized  both  of  those  things, 
I’m  trying  to  put  standards,  structure 
and  discipline  on  top  of  the  creativity, 
complexity  and  speed  involved  in  cre¬ 
ating  toys  without  crushing  the  unique 
spirit  of  Mattel.  It’s  a  struggle.  The  cre¬ 
ative  people  here  come  from  a  very  dif¬ 
ferent  place  than  me,  but  we’re  having 
good  success.”  Pnq 


Share  your  turnaround  stories  with  Senior  Writer 
Stephanie  Overby  at  soverby@cio.com. 


Leadership  Agenda  by susan  h.cramm 


Strategic  Fitness 


A  crash  course  in  strategic  planning 

Whenever  I  begin  a  new  exercise  program,  I  feel  great  and 
wonder  why  I  waited  so  long  to  start.  It’s  the  same  way 
with  strategic  planning.  We  all  feel  better  when  we  are 
strategically  fit.  Unfortunately,  as  with  physical  exercise, 
a  million  little  daily  demands  often  keep  us  from  doing 
what’s  best  for  our  long-term  career  health. 

A  lot  of  my  executive  coaching  clients  use  me  as  their  personal  trainer  for 
strategic  planning.  They  could  do  strategy  without  me,  but  they  want  to  do  it 
right  with  the  least  amount  of  effort.  I  always  start  with  a  fitness  assessment. 
To  determine  if  you  are  strategically  fit,  ask  yourself  these  questions. 

a  Does  your  strategy  address  the  why  and  the  what  questions— that  is,  the 
business  rationale  and  the  applications  plan— as  well  as  the  how  and  the  who 
questions— that  is,  the  technology  and  organizational  elements?  There  are  a 
lot  of  grand  ideas  without  the  legs  to  make  them  happen.  Conversely,  a  lot  of 
people  draw  up  tactical  to-do  lists  without  the  raison  d’etre.  Make  sure  you 
cover  all  the  bases. 

■  Can  your  strategy  be  summarized  in  a  few  sentences?  A  health-care 
executive  recently  told  me,  “I  think  I  have  a  strategy;  I’m  just  unable  to  articu¬ 
late  it.”  If  you  can’t  pitch  it,  you  don't  have  it. 

»  Are  the  benefits  articulated  as  well  as  the  costs  are?  A  lot  of  strategic 
plans  I  review  have  entire  appendixes  dedicated  to  costs,  while  the  benefits 
are  bullet  points  listed  on  a  single  page.  The  value  proposition  should  be  as 
detailed  as  the  costs. 

■  Do  you  have  an  implementation  plan  backed  up  with  the  money  and 
resources  to  realize  it?  Can  you  measure  and  monitor  success? 

By  definition,  a  good  strategy  gets  implemented.  That  means  you  need 
commitment  from  all  of  your  stakeholders.  Many  IT  executives  assume  that 
their  stakeholders  are  the  same  people  for  all  strategic  dimensions.  It’s  not  so. 
For  the  why  and  what  questions,  your  stakeholders  are  your  business  counter¬ 
parts  and  the  people  who  help  them  think  about  IT.  For  the  how  and  who 
questions,  the  primary  stakeholders  are  your  direct  reports  within  the  IS 
organization.  The  how  and  who  strategies  are  driven  by  the  why  and  what 
strategies.  If  you  try  to  get  your  business  counterparts  to  participate  in  the 
how  and  who  questions,  you  will  bore  them  senseless. 

If  your  answers  to  the  those  questions  uncover  some  weaknesses  in  your 
planning,  you  can  use  a  strategy  process  that  I  recommend  for  my  clients.  I 
have  adapted  it  from  a  Harvard  Business  Review  article  titled  “Making 
Strategy:  Learning  by  Doing”  (November-December  1997)  by  Harvard  Busi¬ 
ness  School  Professor  Clayton  M.  Christensen. 

Step  1:  Assess  your  current  positioning.  Do  a  classical  SWOT  (strengths, 
weaknesses,  opportunities  and  threats)  analysis  of  your  department’s  state  of 
affairs.  Get  your  stakeholders  to  pick  the  top  five  issues  and  opportunities  for 
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READER  Q&A  BY  SUSAN  H.CRAMM 

The  How  &  Why  of  a 
Strategy  Workout 


further  analysis. 

Step  2:  Analyze 
the  top  issues  or 
opportunities  to 
identify  the  forces 
that  are  driving 
them.  Ask  “why”  five  tirpes  until  you 
get  to  the  underlying  causes.  At  this 
point  you  will  have  five  to  20  root 
causes.  Ask  your  stakeholders  to  pick 
the  one  or  two  most  important  root 
causes.  Write  "driving  force  state¬ 
ments”  (see  Christensen’s  article  for 
examples). 

Step  3:  Define  your  objectives  and 
measurements  for  each  root  cause. 

Step  4:  Identify  two  or  three  actions 
that  would  best  address  each  root 
cause  and  further  your  objectives  and 
measurements.  These  are  your  strate¬ 
gies.  Document  them  using  Christen¬ 
sen’s  strategy  matrix. 

Step  5:  Define  a  project-based 
implementation  plan  with  assignments 
and  resource  requirements  for  the  next 
year. 

Christensen  says  that  an  outside 
facilitator  can  help  a  management 
team  work  through  these  steps  in  a  few 
intense  days.  If  you  are  new  to  strate¬ 
gic  planning,  you  probably  won’t  feel 
comfortable  asking  senior  executives 
to  give  you  three  full  days  offsite.  Do 
the  best  you  can. 

You  don’t  have  to  be  brilliant  to 
generate  a  great  strategy.  Strategy  is  a 
guess  about  the  future,  tested  in  real¬ 
time  and  iterative  in  nature.  It’s  a 
process,  not  a  project.  And  as  Chris¬ 
tensen  says,  a  good  strategy-making 
process  will  do  a  lot  to  improve  your 
ability  to  think  strategically.  HE] 


Susan  H.  Cramm,  former  CIO  and  vice  president 
of  IT  at  Taco  Bell  and  former  CFO  and  executive 
vice  president  at  Chevys,  is  president  of  Value- 
dance,  an  executive  coaching  firm  based  in  San 
Clemente,  Calif.  To  ask  her  questions,  go  to 
www.cio.com/leadership. 


Q:  I’ve  rarely  seen  any  strategy 
decision  or  plan  executed  in  the 
manner  you’ve  stated.  Usually  strate¬ 
gic  decisions  are  made  by  executive 
management  (both  business  and  IT) 
based  on  political,  organizational  and 
corporate  culture  factors  and  not  on 
detailed  analysis  and  supporting 
implementation  plans. 

A:  Don’t  let  your  frustration  keep  you 
from  doing  whatever  you  can  to 
clarify  the  mission,  objectives,  strate¬ 
gies  and  tactics  of  your  organization. 
Design  your  strategy-making  process 
to  fit  the  cultural,  political  and  organi¬ 
zational  context  of  your  company,  and 
then  have  the  flexibility  and  good 
humor  to  roll  with  punches. 

Q:  How  do  CIOs  recognize  and  define 
corporate  strategy  goals? 

A:  Corporate  goals  should  define 
what  will  be  done,  who  will  do  it,  and 
where,  when  and  how  it  will  be  done, 
and  then  they  should  be  checked  for 
completion  (the  Center  for  Quality  of 
Management  calls  this  the  4W1H1C 
format).  If  your  company  is  one  of 
many  that  have  informal  strategy- 
and  goal-setting  processes,  you  can 
uncover  your  company’s  goals  by 
asking  senior  managers  what  they 
want  to  accomplish  during  the  cur¬ 
rent  year  and  how  they  would  meas¬ 
ure  success. 

Q:  My  findings  show  that  setting 
strategy  is  a  lot  easier  than  achieving 
it.  I  have  investigated  a  number  of 
tools  and  methodologies  that  aim  to 


automate  and  drive  down  strategic 
intent  into  operational  objectives— 
Balanced  Scorecard,  Simplified  Stra¬ 
tegic  Planning,  Universal  Strategic 
Planning  and  so  on. 

A:  You  make  two  very  good  points.  It 
is  much  easier  to  set  strategy  than 
achieve  it— especially  if  you  write  your 
strategy  from  your  office  chair  rather 
than  doing  the  heavy  lifting  required 
to  build  consensus  and  establish  an 
iterative  strategy-making  process. 
Regarding  tools  to  operationalize  the 
strategy,  I  think  the  tool  selection  is 
less  important  than  leveraging  what¬ 
ever  performance  management 
approach  is  already  in  place. 

Q:  Does  the  strategy-making  process 
you  recommend  apply  to  all  kinds  of 
strategy  or  only  to  overall  IT  strategic 
planning?  I  am  developing  a  company 
strategy  for  information  exploitation 
using  Business  Objects  tools.  This  is 
part  of  our  larger  corporate  IT  strat¬ 
egy.  Are  there  variations  to  the  tech¬ 
niques  you  describe  to  accommodate 
this  more  targeted  area? 

A:  You  can  use  Clayton  Christensen’s 
strategic  planning  process  for  any  kind 
of  strategy,  provided  that  you  have  the 
right  people  involved.  Since  using 
Business  Objects  software  is  a  how 
type  of  strategy,  you  need  to  back  up 
and  cover  the  why  and  what  questions. 
You  need  to  understand  the  implica¬ 
tions  of  the  Business  Objects  strategy 
on  applications  and  data  requirements 
before  you  can  identify  the  correct 
positioning  of  the  tools.  HE! 
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ERP 


NESTLE’S 


Nestle  USA’s  costly  and  protracted  struggle  with  its  SAP  project  is  a 
cautionary  tale  for  any  company  intent  on  an  enterprisewide  implementation 

BY  BEN  WORTHEN 


n  June  2000,  Nestle  SA  signed  a  much 
publicized  $200  million  contract  with 
SAP — and  threw  in  an  additional 
$80  million  for  consulting  and  main¬ 
tenance — to  install  an  ERP  system  for 
its  global  enterprise.  The  Switzerland- 
based  consumer  goods  giant  intends  to  use 
the  SAP  system  to  help  centralize  a  con¬ 
glomerate  that  owns  200  operating  compa¬ 
nies  and  subsidiaries  in  80  countries. 

Not  surprisingly,  a  move  of  this  magni¬ 
tude  sparked  skepticism.  Anne  Alexandre, 
an  analyst  who  covers  Nestle  for  HSBC 
Securities  in  London  (the  company  is  traded 
only  in  Europe),  downgraded  her  recom¬ 
mendation  on  Nestle  stock  a  year  after  the 
project  was  announced.  While  she  says  that 
the  ERP  system  will  likely  have  long-term 


benefits,  she  is  wary  of  what  the  project  will 
do  to  the  company  along  the  way.  “It 
touches  the  corporate  culture,  which  is 
decentralized,  and  tries  to  centralize  it,”  she 
says.  “That’s  risky.  It’s  always  a  risk  when 
you  touch  the  corporate  culture.” 

It  is  a  risk  that  Jeri  Dunn,  vice  president 
and  CIO  of  Nestle  USA,  the  $8.1  billion  U.S. 
subsidiary,  knows  all  too  well.  In.  1997,  the 
Glendale,  Calif.-based  company  embarked 
on  an  SAP  project  code-named  Best  (busi¬ 
ness  excellence  through  systems  technology). 
By  the  time  it  reaches  the  finish  line,  Best  will 
have  gobbled  up  six  years  and  more  than 
$200  million  (the  same  amount  its  global 
parent  intends  to  spend).  Dunn  now  says  she 
sees  the  light  at  the  end  of  the  tunnel.  The 
last  rollouts  will  take  place  in  the  first  quar¬ 


ter  of  2003.  But  the  implementation  has 
been  fraught  with  dead  ends  and  costly  mis¬ 
takes.  It  is  a  cautionary  tale,  full  of  lessons 
not  only  for  its  Swiss  parent  but  for  any 
Fortune  1000  company  intent  on  an  enter¬ 
prisewide  software  implementation. 

“I  took  eight  or  nine  autonomous  divi¬ 
sions  and  said  we  are  going  to  use  common 
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Jeri  Dunn,  CIO  of  Nestl6  USA, 
is  refreshingly  open  about 
the  lessons  she  has  learned 


* 


from  her  company’s  ongoing 
ERP  implementation. 


FIVE  Take-Home  Lessons 
from  Nestle’s  ERP 


1.  Don’t  start  a  project  with  a  deadline  in  mind.  Figure  out  the  project  requirements, 
then  determine  how  long  it  will  take  you  to  accomplish  them. 

2.  Update  your  budget  projection  at  regular  intervals.  So  many  things  happen 
during  a  long  project  that  you  will  be  lucky  to  stay  on  target  during  a  particular  year, 
let  alone  the  life  of  the  project.  Frequently  revisiting  your  numbers  will  help  mini¬ 
mize  troublesome  surprises. 

3.  ERP  isn’t  about  the  software.  It’s  easy  to  put  a  new  system  in  place.  The  hard  part 
is  changing  the  business  processes  of  the  people  who  will  use  the  system. 

4.  Nobody  likes  process  change,  particularly  when  they  don’t  know  it’s  coming. 
Include  in  the  planning  the  people  whose  processes  you  are  changing.  Keep  the 
communication  lines  open  while  the  project  is  in  the  works,  and  measure  the  level  of 
acceptance  before,  during  and  after  the  rollout. 

5.  Remember  the  integration  points.  It  isn’t  enough  to  simply  install  new  systems; 

you  need  to  make  sure  that  they  can  talk  to  each  other.  -B.  W. 
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processes,  systems  and  organization  struc¬ 
tures,”  says  Dunn.  “[Nestle  SA  is]  looking 
at  80  autonomous  countries  and  saying  the 
same  thing.  They’re  just  taking  it  up  a  notch. 
If  they  go  in  with  an  attitude  that  there’s  not 
going  to  be  resistance  and  pain,  they’re  going 
to  be  disappointed.” 

Nestle’s  global  SAP  project,  which  is  tied 
in  to  a  larger  $500  million  hardware  and 
software  data  center  rehaul,  will  be  inte¬ 
grated  with  its  American  subsidiary’s  soon- 
to-be  completed  ERP.  And  Dunn  is  even 
lending  70  of  her  own  staffers  for  the  global 
initiative,  as  well  as  some  of  her  hard-won 
expertise.  But  while  the  verdict  is  still  out 
on  the  global  project,  the  pain — angry 
employees,  costly  reengineering  and  long 
periods  when  it  seemed  the  project  would 
never  end — was  worth  it  for  Nestle  USA, 
Dunn  says.  To  date,  she  claims,  the  Best 
project  has  saved  the  company  $325  million. 
(Because  Nestle  is  headquartered  outside  the 
United  States,  it  doesn’t  have  to  disclose  its 
financial  information  to  the  SEC.) 

Regardless  of  the  project’s  exact  ROI,  the 
lessons  learned  are  real.  The  primary  lesson 
Dunn  says  she  has  taken  away  from  the 
project  is  this:  No  major  software  imple¬ 
mentation  is  really  about  the  software.  It’s 
about  change  management.  “If  you  weren’t 
concerned  with  how  the  business  ran,  you 
could  probably  [install  the  ERP  software] 
in  18  to  24  months,”  she  says.  Then  “you 
would  probably  be  in  the  unemployment 
line  in  19  to  25 months.” 

Nestle  learned  the  hard  way  that  an  enter¬ 
prisewide  rollout  involves  much  more  than 
simply  installing  software.  “When  you  move 
to  SAP,  you  are  changing  the  way  people 
work,”  Dunn  says.  “You  are  challenging 
their  principles,  their  beliefs  and  the  way  they 
have  done  things  for  many,  many  years.” 


THE  PROBLEM: 

29  BRANDS  OF  VANILLA 

anilla  may  be  the  world’s  least 
exciting  ingredient — the  word  is 
even  a  synonym  for  bland.  But  that 
wasn’t  the  case  at  Nestle  USA, 
where  vanilla  represented  a  piquant  plethora 
of  inefficiencies  and  missed  opportunities. 

Before  1991,  Nestle  was  simply  a  collec¬ 
tion  of  independently  operating  brands,  such 
as  Stouffer’s  and  Carnation,  owned  by  the 
Swiss-based  parent.  In  1991,  the  brands 
were  unified  and  reorganized  into  Nestle 
USA.  Even  so,  the  new  company  continued 
to  function  more  like  a  holding  corporation 
than  a  single  entity.  Divisions  still  had  geo¬ 
graphically  dispersed  headquarters  and  were 
free  to  make  their  own  business  decisions, 
although  they  now  reported  to  corporate 


Nestle  USA  executives  in  Glendale  rather 
than  in  Vevey,  Switzerland.  The  new  com¬ 
pany  was  trying  to  introduce  economies  of 
scale  and  common  practices,  but  years  of 
autonomous  operation  proved  an  almost 
insurmountable  hurdle. 

In  1997,  a  team  examining  the  various 
systems  across  the  company  found,  among 
many  other  troubling  redundancies,  that 
Nestle  USA’s  brands  were  paying  29  differ¬ 
ent  prices  for  vanilla — to  the  same  vendor. 
“Every  plant  would  buy  vanilla  from  the 
vendor,  and  the  vendor  would  just  get  what¬ 
ever  it  thought  it  could  get,”  Dunn  says. 
“And  the  reason  we  couldn’t  even  check  is 
because  every  division  and  every  factory  got 
to  name  vanilla  whatever  they  wanted  to. 
So  you  could  call  it  1234,  and  it  might  have 
a  whole  specification  behind  it,  and  I  might 
call  it  7778.  We  had  no  way  of  comparing.” 

While  the  American  brands  were  willing  to 
go  about  their  business  as  autonomous  com¬ 
panies — headaches  be  damned — the  Swiss 
parent  knew  that  similar  problems  would 
continue.  In  1991,  the  same  year  that  Nestle 
USA  was  created,  Dunn,  then  associate  direc¬ 
tor  for  application  systems  of  Stouffer’s 


Even  before  the  SAP  modules  were  rolled 
out,  there  was  rebellion  in  the  ranks. 


64  CIO  MAY  15,  2002  •  www.cio.com 


Deploying  and  operating  mission-critical  applications  with  high 
availability  and  timely  delivery  requires  agility,  people  productivity 
and  operational  effectiveness.  You  need  proven  technology,  successful 
production  processes  and  most  of  all,  TEAMWORK. 

With  25  years  of  JCL  technology  and  expertise.  Diversified 
Software  can  help  you  leverage  your  internal  resources  to  achieve 
operational  effectiveness  and  maintain  competitive  advantage. 


With  mission-critical  operation  demands,  wouldn't  life  be  easier 
a  proven  partner? 

To  receive  our  white  paper  "Best  Practices  for  JCL  Asset 

Management  -  for  the  successful  deployment  and 
operation  of  mission-critical  applications",  call 
1  -877-265-2675  or  1  -408-778-991 4,  or  visit 
www.diversifiedsoftware.com/operations 


with 


Expertise  makes 
the  Difference 


- -  .i  ,i .  ^ 

Diversified 

Software 


©  Copyright  2002.  The  Diversified  Software  Systems  logo  is  a  registered  trademark  of  Diversified  Software  Systems,  Inc. 


I 


Cover  Story  |  ERP 


Hotels,  one  of  the  many  Nestle  brands,  went 
to  Switzerland  to  help  implement  a  common 
methodology  for  Nestle  projects  worldwide. 
In  1995,  she  was  promoted  to  assistant  vice 
president  of  technology  and  standards  for 
Nestle  SA,  where  she  came  up  with  technol¬ 
ogy  standards  for  every  Nestle  company  to 
follow.  Dunn  figured  that  common  systems 
across  the  Nestle  empire  would  create  sav¬ 


ings  through  group  buying  power  and  facili¬ 
tate  data  sharing  between  subsidiaries. 

Yet  when  Dunn  returned  stateside  to  take 
the  more  hands-on  CIO  job  at  Nestle  USA 
in  1997,  she  found  that  few  of  her  recom¬ 
mendations  had  been  acted  on.  “My  team 
could  name  the  standards,  but  the  imple¬ 
mentation  rollout  was  at  the  whim  of  the 
businesses,”  she  says  during  a  recent  inter¬ 


Tom  James,  director  of  process  change  (left),  Jose  Iglesias,  director  of  IS  (center),  and 
Dick  Ramage,  VP  of  supply  chain  (right),  joined  forces  with  Jeri  Dunn  to  rescue  the 
SAP  implementation. 


view  in  her  sparsely  decorated  fourth  floor 
office  in  Glendale.  Dunn  takes  cigarette 
breaks  at  every  possible  opportunity  and 
isn’t  afraid  to  dress  in  a  leopard-print  skirt 
and  blouse.  At  47,  she  is  a  survivor  who  is 
refreshingly  open  about  her  mistakes  and  is 
respected  throughout  the  company.  Her  staff 
speaks  of  her  in  almost  reverential  tones. 

THE  PROPOSAL: 

ONE  NESTLE,  UNDER  SAP 

Dunn’s  arrival  in  spring  1997 came  a 
few  months  after  Nestle  USA 
Chairman  and  CEO  Joe  Weller 
coined  the  term  One  Nestle  to  re¬ 
flect  his  goal  of  transforming  the  separate 
brands  into  one  highly  integrated  company. 
In  June,  Dunn  joined  with  executives  in 
charge  of  finance,  supply  chain,  distribution 
and  purchasing  to  form  a  key  stakeholders 
team  and  study  what  was  right  and  wrong 
with  the  company.  When  the  time  came,  the 
key  stakeholders  were  initially  allotted  a  lit¬ 
tle  over  two  hours  to  present  their  findings 
to  Weller  and  other  top  Nestle  officials. 

The  team  balked  at  the  time  limit.  “I  told 
them  that  they  would  either  throw  me  out 
in  the  first  15  minutes  or  they  would  cancel 
the  rest  of  the  day,  and  we  would  really  have 
a  great  discussion,”  says  Dick  Ramage, 
Nestle  USA’s  vice  president  of  supply  chain 
and  a  member  of  the  team.  “It  took  them  an 
hour,  but  they  canceled  the  rest  of  the  day.” 

“I  don’t  think  they  knew  how  ugly  it 
was,”  says  Dunn,  referring  to  the  company’s 
condition.  “We  had  nine  different  general 
ledgers  and  28  points  of  customer  entry.  We 
had  multiple  purchasing  systems.  We  had  no 
clue  how  much  volume  we  were  doing  with 
a  particular  vendor  because  every  factory 
set  up  their  own  vendor  masters  and  pur¬ 
chased  on  their  own.” 

Soon  the  stakeholders  team  presented 
Weller  with  a  blueprint  for  major  changes 
they  thought  could  be  made  in  three  to  five 
years.  While  the  cornerstone  of  the  recom¬ 
mendation  was  an  SAP  package,  Dunn  says, 
“We  made  it  very  clear  that  this  would  be  a 
business  process  reorganization  and  that  you 
couldn’t  do  it  without  changing  the  way  you 


Regional  Floral  Network,  January  14 


Regional  Floral  Network,  February  14 


In  its  haste  to  meet  Y2K  deadlines, 
the  project  team  had  overlooked  the 
integration  points  between  modules. 
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did  business.  There  was  going  to  be  pain 
involved,  it  was  going  to  be  a  slow  process, 
and  this  was  not  a  software  project.” 

Despite  that  warning,  it  would  later 
become  apparent  that  neither  Weller  nor  the 
key  stakeholders  really  understood  the  degree 
to  which  the  Best  project  would  change  the 
business  processes  at  Nestle  or  the  amount 
of  pain  it  would  cause.  “They  still  thought 
that  it  was  just  about  software,”  Dunn  says. 

By  October  1997,  a  team  of  50  top  busi¬ 
ness  executives  and  10  senior  IT  professionals 
had  been  assembled  to  implement  the  SAP 
project.  The  team’s  goal  was  to  come  up  with 
a  set  of  best  practices  that  would  become 
common  work  procedures  for  every  Nestle 
division.  All  the  divisional  functions — manu¬ 
facturing,  purchasing,  accounting  and  sales — 
would  have  to  give  up  their  old  approaches 
and  accept  the  new  pan-Nestle  way. 

On  the  technical  side,  a  smaller  team 
spent  18  months  examining  every  bit  of  item 
data  in  each  division  in  order  to  implement  a 
common  structure  across  the  company. 
From  now  on,  vanilla  would  be  code  1234 
in  every  division.  The  SAP  system  would  be 
customized  around  the  uniform  business 
processes.  In  the  case  of  the  supply  chain,  the 
team  decided  not  to  use  SAP  because  the 
ERP  company’s  supply  chain  module,  Ad¬ 
vanced  Planner  and  Optimizer  or  APO,  was 
brand-new  and  therefore  risky.  Instead, 
Nestle  turned  to  Manugistics — at  that  time 
an  SAP  partner.  Manugistics’  supply  chain 
module  followed  all  the  SAP  standards  and 
could  easily  be  integrated. 

By  March  1998  the  key  stakeholders  had  a 
plan  in  place.  Nestle  would  implement  five 
SAP  modules — purchasing,  financials,  sales 
and  distribution,  accounts  payable  and  ac¬ 
counts  receivable — and  the  Manugistics’  sup¬ 
ply  chain  module.  Each  would  be  deployed 
across  every  Nestle  division.  For  instance,  the 
purchasing  group  for  confections  would  fol¬ 
low  the  same  best  practices  and  data  as  the 
purchasing  group  for  beverages. 

Development  work  began  in  July  1998. 
The  deadline  for  four  of  the  modules  was 
Y2K.  The  new  systems  would  have  to  dou¬ 
ble  as  code  fixes  and  be  in  place  for  the  mil¬ 


lennial  change.  Nestle  USA  made  the  dead¬ 
line.  But  its  haste  created  almost  as  many 
problems  as  it  solved. 

THE  PROCESS: 
NESTLE’S  CRUNCH 

Even  before  three  of  the  SAP  and  the 
Manugistics  modules  were  rolled 
out  in  late  1999,  there  was  rebellion 
in  the  ranks.  Much  of  the  employee 
resistance  could  be  traced  to  a  mistake  that 
dated  back  to  the  project’s  inception:  None 
of  the  groups  that  were  going  to  be  directly 
affected  by  the  new  processes  and  systems 
were  represented  on  the  key  stakeholders 
team.  Consequently,  Dunn  says,  “We  were 

Nestle  USA 
at  a  Glance 


■  BUSINESS  DIVISIONS:  Seven 
(beverage,  confections  and  snacks, 
food  services,  foreign  trade,  nutrition, 
prepared  foods  and  sales) 

■  POPULAR  BRANDS:  Alpo,  Baby 
Ruth,  Carnation  Instant  Breakfast, 
Coffee-Mate,  Nescafe,  Nestle 
Carnation  Baby  Formulas,  Nestle  Toll 
House,  PowerBar,  Stouffer’s  Lean 
Cuisine,  SweeTarts,  Taster’s  Choice 

■  ANNUAL  REVENUE:  $8.1  billion 

■  NUMBER  OF  EMPLOYEES:  16,000 

■  PROJECTED  COST  OF  SAP: 

$210  million 

■  I.T.  STAFF  (including  outside 
consultants):  250 


always  surprising  [the  heads  of  sales  and  the 
divisions]  because  we  would  bring  some¬ 
thing  up  to  the  executive  steering  commit¬ 
tee  that  they  weren’t  privy  to.”  Dunn  calls 
that  her  near  fatal  mistake. 

By  the  beginning  of  2000,  the  rollout  had 
collapsed  into  chaos.  Not  only  did  workers 
not  understand  how  to  use  the  new  system, 
they  didn’t  even  understand  the  new  pro¬ 
cesses.  And  the  divisional  executives,  who 
were  just  as  confused  as  their  employees — 
and  even  angrier — didn’t  go  out  of  their  way 
to  help.  Dunn  says  her  help  desk  calls 
reached  300  a  day.  “We  were  really  naive  in 
the  respect  that  these  changes  had  to  be 
managed,”  she  admits  now. 

Nobody  wanted  to  learn  the  new  way  of 
doing  things.  Morale  tumbled.  Turnover 
among  the  employees  who  forecast  demand 
for  Nestle  products  reached  77  percent;  the 
planners  simply  were  loath  or  unable  to 
abandon  their  familiar  spreadsheets  for  the 
complex  models  of  Manugistics. 

A  technical  problem  soon  emerged  as 
well.  In  the  rush  to  beat  the  Y2K  deadline, 
the  Best  project  team  had  overlooked  the 
integration  points  between  the  modules.  All 
the  purchasing  departments  now  used  com¬ 
mon  names  and  systems,  and  followed  a 
common  process,  but  their  system  was  not 
integrated  with  the  financial,  planning  or 
sales  groups.  A  salesperson,  for  example, 
may  have  given  a  valuable  customer  a  dis¬ 
count  rate  and  entered  it  into  the  new  system, 
but  the  accounts  receivable  department 
wouldn’t  know  about  it.  So  when  the  cus¬ 
tomer  paid  the  discounted  rate,  it  would 
appear  to  the  accounts  receivable  operative 
as  though  the  invoice  were  only  partially 
paid.  In  its  haste  to  unify  the  company’s  sep¬ 
arate  brands,  the  project  team  had  essentially 
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replaced  divisional  silos  with  process  silos. 

In  June  2000  the  project  was  halted.  The 
company  removed  Marc  Richenderfer  as 
project  coleader  and  gave  Dunn  full  respon¬ 
sibility.  (Richenderfer  was  reassigned  to  work 
in  Switzerland.)  It  was  time  for  self-exami¬ 
nation.  In  October  2000,  Dunn  gathered  19 
Nestle  USA  key  stakeholders  and  business 
executives  for  a  three-day  offsite  at  the 
DoubleTree  Hotel  in  Pasadena,  Calif.,  about 
10  miles  from  Nestle  headquarters. 

Jose  Iglesias,  director  of  information  sys¬ 
tems,  says  the  retreat  started  off  as  a  gripe 
session.  The  time  constraints  necessitated  by 
Y2K  had  put  too  much  pressure  on  the  peo¬ 
ple  in  charge  of  executing  the  changes.  The 
project  team  had  lost  the  big  picture  of  how 
the  various  components  would  work 
together.  And  there  was  still  work  to  be 
done.  The  existing  modules  had  to  be  inte¬ 
grated  and  the  team  still  needed  to  roll  out 
two  more  SAP  modules — sales  and  distri¬ 
bution  on  the  domestic  side,  and  accounts 
receivable— as  well  as  a  new  module  for  the 
supply  chain.  Since  Dunn  had  rejected  the 
x'SAP  supply  chain  module  two  years  before, 
it  had  improved  and  been  named  a  Nestle 
global  standard  by  Dunn’s  old  standards 
group  in  Switzerland.  So  she  decided  to 
replace  all  but  a  couple  of  parts  of  the 
Manugistics  system  with  APO.  Dunn  esti¬ 
mates  that  last-minute  switcheroo  accounted 
for  5  percent  of  Best’s  $210  million  cost. 

The  offsite  group  members  eventually  de¬ 
cided  that  to  finish  the  project  they  would 
need  to  begin  at  the  beginning,  starting  with 
the  business  requirements  then  reaching  an 
end  date,  rather  than  trying  to  fit  the  project 
into  a  mold  shaped  by  a  predetermined  end 
date.  They  also  concluded  they  had  to  do  a 
better  job  of  making  sure  that  they  had  sup¬ 


port  from  key  divisional  heads  and  that  all 
the  employees  knew  exactly  what  changes 
were  taking  place,  when,  why  and  how. 

THE  END  GAME: 
SADDER  BUT  WISER 

y  April  2001,  the  end-state  design 
was  complete,  giving  the  project 
team  a  highly  detailed  road  map  to 
follow.  A  month  later,  Tom  James 
came  on  board  as  director  of  process  change 
for  the  Best  project,  having  the  sole  respon¬ 
sibility  of  acting  as  a  liaison  between  the 
divisions  and  the  project  team.  James  says 
that  he  was  shocked  by  the  still  poor  rela¬ 
tionship  between  the  divisions  and  the  proj¬ 
ect  team.  He  and  Dunn  began  meeting  with 
more  of  the  division  heads.  They  also  started 
conducting  regular  surveys  of  how  the 
employees  affected  by  the  new  systems  were 
dealing  with  the  changes. 

They  were  not  afraid  to  react  to  what 
they  found.  Dunn  says  that  Nestle  recently 
delayed  the  rollout  of  a  new  comanufactur¬ 
ing  package  for  six  months  based  on  feed¬ 
back  indicating  that  the  would-be  users  were 
not  prepared  to  make  the  process  changes 
that  were  involved. 

ERP  projects  are  notorious  for  taking  a 
long  time  and  a  lot  of  money.  Jennifer 
Chew,  an  analyst  at  Cambridge,  Mass.- 
based  Forrester  Research,  found  that 
54  percent  of  respondents  to  a  recent  sur¬ 
vey  said  that  their  project  lasted  more  than 
two  years  (the  other  46  percent  brought 
theirs  to  fruition  in  less  than  two  years). 
Nestle  USA’s  project  “sounds  on  the  high 
side”  for  both  time  and  money,  says  Chew. 
Still,  success  is  ultimately  measured  by  what 
the  project  accomplishes.  Chew  points  out 
that  Kmart  had  to  write  off  $130  million  for 


So  far,  the  new  SAP  system  has  allowed 
Nestle  to  reduce  inventory  and  save  on 
supply  chain  cost. 


cio.com _ 

Share  your  lessons  in  enterprise 
implementations.  WEIGH  IN  for  the 
next  two  weeks  at  www.cio.com. 


an  ERP  project  that  was  never  completed. 

Dunn  herself  is  not  ashamed  of  the  length 
of  the  project  or  the  numerous  dead  ends. 
She  insists  that  slow  and  steady  wins  the 
race.  Nestle  USA  has  already  achieved  sig¬ 
nificant  ROI,  she  says,  with  the  largest 
chunk  of  savings  from  better  demand  fore¬ 
casting.  “The  old  process  involved  a  sales 
guy  giving  a  number  to  the  demand  plan¬ 
ner,  who  says,  ‘Those  guys  don’t  know  what 
the  hell  they  are  talking  about;  I’m  going  to 
give  them  this  number,”’  Dunn  says.  “The 
demand  planner  turns  [that  number]  over 
to  factory,  and  the  factory  says  the  demand 
planner  doesn’t  know  what  the  hell  he’s  talk¬ 
ing  about.”  Then  the  factory  changes  the 
number  again. 

With  SAP  in  place,  common  databases 
and  business  processes  lead  to  more  trust¬ 
worthy  demand  forecasts  for  the  various 
Nestle  products.  Furthermore,  because  all 
of  Nestle  USA  is  using  the  same  data, 
Ramage  says,  Nestle  can  forecast  down  to 
the  distribution  center  level.  That  allows  the 
company  to  reduce  inventory  and  the  redis¬ 
tribution  expenses  that  occur  when  too 
much  of  a  product  is  sent  to  one  place  and 
not  enough  to  another.  Ramage  says  that 
supply  chain  improvements  accounted  for  a 
major  chunk  of  the  $325  million  Nestle  says 
it  has  saved  from  SAP. 

If  Dunn  were  to  do  it  over  again,  she’d 
focus  first  on  changing  business  processes 
and  achieving  universal  buy-in,  and  then 
and  only  then  on  installing  the 'software.  “If 
you  try  to  do  it  with  a  system  first,  you  will 
have  an  installation,  not  an  implementa¬ 
tion,”  she  says.  “And  there  is  a  big  difference 
between  installing  software  and  implement¬ 
ing  a  solution.”  MLrJ 


Got  any  ERP  implementation  stories  to  share? 
Let  Staff  Writer  Ben  Worthen  know  via  e-mail  at 
bworthen@cio.com. 


Internet  Tax  Prep  Service,  September  14 


Internet  Tax  Prep  Service,  April  14 


HP  Blade  servers  are  here.  The  most 
flexible  way  to  manage  your  infrastructure. 


Radical  simplicity.  Extraordinary  flexibility.  HP  Blade 
servers  are  about  to  forever  change  the  way  you  look  at, 
manage  and,  yes,  even  maneuver  through  your 
data  center. 

They  are  complete,  ultra-dense  servers  on 
single  modular  cards  — including  processor, 
memory  and  all  network  connections  — that  come 
with  a  choice  of  Linux,  Windows®  or  HP-UX. 

This  elegant,  standards-based  design  allows 
you  to  easily  combine  server,  storage,  networking, 
appliance  and  management  blades  in  the  same  38-slot 


chassis,  then  reconfigure  on  the  fly  to  handle  expanding 
or  contracting  workloads. 

Each  blade  connects  to  the  network  infrastructure 
already  embedded  in  the  chassis,  dramatically  cutting 
the  number  of  cables  needed.  With  far  fewer  cables 
to  fuss  with,  they're  far  easier  to  manage  and  maintain 
than  conventional  servers.  Even  management  is 
shared.  Which  means  all  38  blades  can  be  viewed 
and  monitored  as  a  single  system. 

Since  all  blades  in  the  chassis  share  the  same  power  and 
cooling  source,  they're  also  more  energy  and  space  efficient.  In 
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fact,  you'll  find  that  HP  Blade  servers  reduce  the  typical  number 
of  fans  and  power  supplies  required  by  as  much  as  60%. 

The  reliability  advantages  of  moving  to  blades  are 
profound.  To  give  you  some  perspective,  imagine  building  a 
server  cluster  solution  that  is  comparable  to  a  fully  loaded 
HP  Blade  server  cabinet.  The  projected  annual  failure  rate  of 
the  HP  Blade  server  solution  is  about  41%  lower  than  that  of 
the  comparable  server  cluster. 

In  the  unlikely  event  that  a  blade  should  fail,  the  problem 
is  isolated  in  the  same  way  that  multiple  systems  connected 
by  I/O  are  isolated  from  each  other.  So  each  blade  functions 
as  a  separate,  stand-alone  unit. 

Servicing  a  blade  is  as  easy  as  deploying  one.  Each 
blade  is  freely  accessible  from  both  the  front  and  rear  of 


the  cabinet  and  can  thus  be  replaced  at  a  moment's 
notice.  Each  slot  can  be  powered  on  or  off  separately. 
Hot-swap  and  hot-plug  technology  is  implemented 
throughout,  allowing  for  the  seamless  addition  or 
replacement  of  blades  while  the  rest  of  your  infrastructure 
continues  to  hum. 

We  invite  you  to  read  our  technical  white  paper  on  HP 
Blade  servers.  Or,  better  yet,  talk  directly  with  one  of  our 
infrastructure  specialists  to  find  out 
how  HP  Blade  servers  can  change 
the  face  of  your  business.  Call 
1.800.HPASKME,  ext.  246.  Or  visit 
www.hp.com/go/infrastructure. 

Infrastructure:  it  starts  with  you.  invent 


Security  Staffing 


It  doesn’t  matter  whether  you  find  them  inside  your  company 
or  beyond  its  walls,  but  you  need  to  dedicate  people  to  security. 

Here’s  how  to  find  them,  train  them  and  keep  them. 

BY  ERIC  BERKMAN 


LAST  YEAR,  DAVID  SAUL,  EXECUTIVE  VICE  PRESIDENT  AND  CIO  OF 


commercial  insurer  Zurich  NorthkAmerica,  pulled  a  dozen  IT  staffers  away 
from  their  daily  tasks  to  combat  a  virus  that  was  attacking  the  company’s  fire¬ 
walls.  They  did  a  good  job  limiting  the  damage,  but  it  took  two  days— two  days 
in  which  other  work  did  not  get  done.  Next  time,  Saul  hopes  to  be  ready  to 
respond  before  a  threat  surfaces.  ‘‘We  want  to  be  in  a  safety  zone  that  doesn’t 
require  that  kind  of  immediate  mobilization,”  he  says. 

That’s  why  Saul  increased  his  full-time  information-security  staff  from 
12  to  18  people,  mostly  by  training,  reorganizing  and  reassigning  IT  people  to 
security.  “Good  security  equals  prevention,  detection  and  reaction,”  says 
Saul,  who  is  based  in  Schaumburg,  III.  “If  you’re  not  going  to  staff  to  make  the 
process  work,  then  your  exposure  to  security  breaches  is  higher.” 

That  exposure  is  an  increasingly  wide¬ 
spread  problem.  In  a  2001  survey  of  security 
practitioners  conducted  by  the  Computer 
Security  Institute  and  the  FBI,  85  percent  of 
respondents  (primarily  from  large  corpora¬ 
tions  and  government  agencies)  had  detected 
computer  security  breaches  in  the  previous 
year,  and  64  percent  of  those  respondents 
acknowledged  suffering  financial  losses. 


Reader  ROI 

►  Learn  how  to  build  a  team 
to  handle  information 
security 

►  Find  out  how  to  hire  skilled 
security  professionals 

►  See  how  to  use  your  IT 
organization  as  a  security 
staffing  resource 
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David  Saul,  executive  vice  president  and  CIO  of 
Zurich  North  America:  “Good  security  equals 
prevention,  detection  and  reaction.  If  you're  not 
going  to  staff  to  make  the  process  work,  then  your 
exposure  to  security  breaches  is  higher." 


Security  Staffing 


In  fact,  there’s  no  limit  to  the  damage  evil¬ 
doers  can  inflict.  Sept.  1 1  proved  that.  In  this 
environment,  many  people  believe  that  it’s 
sheer  madness  to  have  an  IT  staff  handling 
information  security  on  an  ad  hoc  basis.  “It’s 
a  hard-and-fast  rule,  in  my  opinion,”  says 
John  Hartmann,  vice  president  of  security 
and  corporate  services  of  Cardinal  Health, 
a  $47  billion  health-services  provider  in 
Dublin,  Ohio.  “If  the  two  roles  are  shared, 
business  priorities  will  drive  security  to  a 
lower  priority.” 

Tim  Mitchell,  CIO  of  Sarnoff,  an  elec¬ 
tronic,  biomedical  and  information  technolo¬ 
gies  company  in  Princeton,  N.J.,  disputes 
that,  saying  that  his  IT  staff  handles  secu¬ 
rity  very  well,  thank  you.  But  he  does  agree 
that  people  charged  with  security  responsi¬ 
bility  must  be  organized  into  a  team — as  his 
are — carrying  out  a  coherent  security  pro¬ 
gram  that  sets  out  specific  responsibilities 


ening:  There  aren’t  many  out  there.  The  gap 
between  supply  and  demand  is  the  largest 
among  all  IT  skills,  says  David  Foote,  presi¬ 
dent  and  chief  research  officer  of  Foote 
Partners,  an  IT-workforce  research  consul¬ 
tancy  in  New  Canaan,  Conn.  “Employers 
can  fill  only  one  out  of  13  jobs,”  he  says. 

Nonetheless,  the  market  has  improved 
during  the  economic  downturn;  it’s  much 
easier  to  hire  skilled  security  people  than  it 
was  a  year  ago.  “[In  early  2001],  we  were 
paying  a  lot  of  headhunter  fees  for  recruit¬ 
ing,”  says  Bruce  L.  Murphy,  CEO  of  Vigi- 
linx,  a  security  services  company  in  Parsip- 
pany,  N.J.  “Now  we  don’t  need  to.”  But 
even  in  a  buyer’s  market,  CIOs  need  to 
know  how  to  compete  for  the  best  candi¬ 
dates.  Here’s  what  you  can  do. 

Analyze  your  needs.  No  self-respecting 
security  professional  wants  anything  to  do 
with  a  company  that’s  clueless  about  why  it’s 


trading  network  for  institutional  investors 
and  brokers.  “And  usually  it’s  the  specialists 
who  provide  higher  rates  of  good-quality 
resumes.” 

CIOs  who  strike  out  on  their  own  have 
to  find  their  own  leads.  Bill  Boni,  chief 
information  security  officer  for  Motorola, 
the  $30  billion  communications  equip¬ 
ment  manufacturer  in  Schaumburg,  Ill., 
says  the  military  is  a  particularly  good 
source  for  security  people.  Find  them 
through  newspaper  ads  in  cities  with  large 
military  populations,  such  as  San  Antonio 
and  San  Diego.  Eddie  Schwartz,  former 
senior  vice  president  of  Guardent,  a 
security-services  company  in  Waltham, 
Mass.,  suggests  contacting  outplacement 
personnel  at  military  bases. 

Universities  are  a  good  source  of  entry- 
level  people.  Schwartz  points  to  Bowling 
Green  State  University  in  Ohio,  Purdue 


If  you  make  security  people  work  with  old  tools— mainframe 
applications,  for  example— you’ll  really  frustrate  them. 

-Alan  Palter,  director  of  research  for  the  SANS  Institute 


and  requires  regular  meetings. 

A  security  team  needs  to  set  policies  and 
procedures,  assess  vulnerability,  detect  intru¬ 
sion,  respond  to  incidents  and  manage  secu¬ 
rity  architecture.  And  perhaps  most  impor¬ 
tant  of  all,  it  needs  a  leader. 

Finding  skilled  security  professionals  to 
carry  out  this  mission  can  be  tough,  and  the 
alternative — training  in-house  IT  staffers  who 
are  security  novices — can  be  costly  and  time- 
consuming.  (Outsourcing  security  is  another 
option.  To  read  a  cautionary  tale  about  the 
pitfalls  of  outsourcing  security,  check  out 
“Exposed,”  at  www.cio.com/printlinks.)  But 
whichever  route  you  choose,  here  are  some 
ways  to  enhance  your  chances  of  success. 

A  Shopper’s  Guide 

CIOs  looking  to  hire  skilled,  experienced 
security  people  could  be  in  for  a  rude  awak- 


) 

hiring  him,  says  Lee  Kushner,  CEO  of  L.J. 
Kushner  and  Associates,  a  Freehold,  N.J., 
recruiting  company  that  focuses  on  security 
personnel.  So  figure  out  what  your  company 
needs,  either  through  an  in-house  assessment 
or  with  the  help  of  a  consultancy.  But  be 
warned:  Help  doesn’t  come  cheap.  Outside 
evaluation  can  run  up  to  $500,000  for  a  full¬ 
blown  examination  of  a  global  organization. 

Look  smart.  The  security  industry  is  very 
insular,  says  Kushner,  and  potential  employ¬ 
ers  need  to  know  the  secret  handshakes. 
Specialized  recruiters  are  the  best  way  in. 
Unlike  large  general  recruiting  companies, 
specialized  recruiters  have  deep  and  wide  con¬ 
tacts  in  the  security  community.  “I’ve  tried 
all  kinds  of  firms,”  says  Denis  Verdon,  first 
vice  president  and  global  head  of  informa¬ 
tion  risk  management  for  Eistinet,  a  $1.5  bil¬ 
lion  New  York  City  operator  of  an  electronic 


University,  James  Madison  University  and 
Virginia  Tech,  as  having  good  IT  programs 
with  information  security  offerings.  Contact 
their  career  placement  offices  for  help. 

Alan  Paller,  director  of  research  for  the 
SANS  Institute,  an  information-security 
training  and  professional  organization  in 
Bethesda,  Md.,  suggests  that  CIOs  raid  the 
security-services  companies  they’re  using. 
“There  are  so  many  consulting  firms,  and 
so  few  that  are  doing  well,”  he  says. 
“Many  of  their  consultants  are  desperately 
looking  for  jobs  in  the  real  world.”  Boni 
agrees,  adding  that,  of  course,  the  CIO 
should  inform  vendors  that  they’re  in  the 
market  for  personnel.  Once  the  vendors 
know  that,  he  says,  those  looking  to  down¬ 
size  will  be  only  too  happy  to  help.  And 
placing  their  consultants  with  the  compa¬ 
nies  they  do  business  with  has  an  upside. 
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Introducing  Guardian™  Network  Attached  Storaqe 
Simple,  Cost-Effective  Storage  for  the  Enterprise 


Tired  of  Your  High-Maintenance  Relationship 

with  Storage? 

“ You  are 
working 
this  weekend, 
otherwise,  NO 
file  sharing 
on  Monday 
morning !” 


“ Why  are  we 
paying  ALL  this 
money  for  outside 
consultants?  Aren ’t 
you  supposed  to 
be  the  storage 
expert ?” 


“We  spent 
HOW  MUCH 
on  some  server? 
I  could  buy  a 
house  for 
that!” 


f  “What  do 
you  mean  the 
system  is  going 
to  be  down  for 
,  HOURS?” 


1.4TB/ 3U...under  $25,000 

The  new  Quantum  Guardian™  14000 
server  eliminates  cost  and 
complexity  from  your  storage 
infrastructure.  Deployment  is  quick 
and  easy,  with  no  downtime.  That  should 
save  some  headaches.  And  the  low  acquisition  cost  combined 
with  its  high  availability  and  minimal  administration  helps  you  live 
within  your  budgets.  Yet  you  still  enjoy  the  enterprise-class  security, 
management  and  performance  your  environment  demands.  The  new 
Quantum  Guardian1'1  14000  servers... building  blocks  for  simple, 
scalable  storage  growth.  Visit  www.quantum.com/Guardianl400Q 
for  an  interactive  demo. 


Specs  •  1.4TB  •  3U  •  Dual  Gigabit  Ethernet  •  Supports  Windows/ 
UNIX/Linux/Macintosh  Environments  •  Journaling  File  System 

•  Standard  On-site  Support 

Security /Management  •  Microsoft  Active  Directory  Service  (ADS) 

•  Kerberos  Authentication  •  UNIX  Network  Information  Service  (NIS) 

•  SNMP  •  Encryption  •  File  and  Folder  Security  •  Quotas  for  Users 
and  Groups' 

Availability  •  RAJD  5,1,0  •  12  Hot-swappable  Disk  Drives 

•  Redundant,  Hot-swappable  Power  Supplies  and  Cooling  Fans 

•  Dual  Ethernet  for  Load  Balancing  and  Failover  •  Dual  Power  Cords 

Data  Protection  •  Snapshots  •  Backup  Agent  Support  (VERITAS 
NetBackup  and  Backup  Exec,  CA  ARCserve,  Legato  NetWorker) 

•  Server-to-Server  (S2S)  Synchronization  Software  •  Local  Backup  via 
SCSI  Port2  •  APC  Smart-UPS  Support  •  Unlimited  User  License 
PowerQuest  DataKeeper  (for  Windows  Client  Backup) 


1 .888.343.7627  •  www.quantum.com 


Quantum. 


Security  Staffing 


“Now  they’ve  got  an  ongoing  relationship 
with  alumni  inside  your  organization,  who 
are  well-positioned  to  identify  other  oppor¬ 
tunities,”  Boni  says. 


You’ve  Got  ’Em— Now  What? 

Once  you’ve  found  the  workers  you  want, 
you  need  to  keep  them.  Tools,  recognition 
and  salary  are  the  glue  that  will  make  them 
stick  with  you. 

Tools  talk.  Tools  are  crucial.  Security  pro¬ 
fessionals  strive  to  be  what  they  call  mas¬ 
ters,  people  at  the  top  of  the  security 
pyramid.  Making  cutting-edge  technology 
available  to  them  will  help  them  feel  that 
they’re  achieving  that  status.  “If  you  make 
them  work  with  old  tools — mainframe 
applications  and  Novell,  for  example — 
you’ll  really  frustrate  them,”  says  Paller.  So  if 
you’ve  got  a  sophisticated  IT  environment, 
flaunt  it.  Some  of  the  most  desirable  toys  for 
security  folk,  according  to  H.  Michael  Boyd, 
a  Walpole,  Mass.,  HR  consultant,  include 
Nessus  (a  cutting-edge  network  scanner), 
Snort  (a  leading  intrusion-detection  tool) 
Nand  RAT  (a  system-tester  for  routers). 

Make  ’em  feel  loved.  CIOs  looking  to  woo 
candidates  can  offer  to  pay  for  training, 
certification  and  conference  attendance. 
Recruiter  Kushner  says  he’s  negotiated  con¬ 
ference  attendance  into  employment  agree¬ 
ments.  Promising  to  send  security  people 
to  at  least  one  good  conference  or  training 
program  a  year  should  keep  them  happy, 
says  Paller. 

Security  people  also  thrive  on  recognition, 
says  Paller.  This  recognition  should  be  more 
than  a  pat  on  the  back  or  a  “thank  you” 
e-mail.  It  has  to  be  public.  A  good  tactic  is 
allowing  security  people  to  present  their 
work  at  a  conference  so  that  they  get  exter¬ 
nal  validation  too. 

Security  professionals  can  lose  motivation 
if  they  don’t  feel  they  have  management’s 
support.  That  is  true  for  any  employee,  but 
the  stakes  are  a  lot  higher  when  you’re  deal¬ 
ing  with  people  who  have  top-level  access  to 
your  systems.  Within  reason,  CIOs  need  to 
back  security  people  in  conflicts  between 
security  and  business  needs. 


Bill  Boni,  chief  information  security  officer  for  Motorola,  built  his  security  staff  largely  by 
repositioning  IT  people.  “They  just  come  out  of  the  woodwork,”  he  says. 

Money  talks  too.  Don’t  forget  to  keep 


salaries  competitive.  Line  security  engineers 
command  anywhere  from  $60,000  at  the 
lowest  levels  to  the  high-five  figures  at  the 
top,  and  heads  of  security  can  command 
between  $130,000  and  $180,000,  says 
Maria  Schafer,  program  director  for  human 
capital  management  at  Meta  Group  in 
Stamford,  Conn.  The  best  way  to  bench¬ 
mark  salaries  is  by  talking  to  specialized 
recruiters  and  networking  among  peers 
who’ve  hired  security  people,  says  Murphy, 
pointing  out  that  in  an  evolving  field  like 
security,  salary  surveys  are  usually  out-of- 
date  by  the  time  they  are  published. 

inside  Moves 

If  you  don’t  want  to  go  out  on  the  open 
market,  Paller  suggests  looking  to  your  sys¬ 
tems  and  network  administrators.  They’ve 
got  great  technical  skills  and  probably 


good  (albeit  uneven)  knowledge  of  security 
concepts  and  issues.  And  they’ve  likely  tin¬ 
kered  with  the  security  of  their  environ¬ 
ment  and  responded  to  incidents  as  part 
of  their  IT  duties.  “They’re  just  waiting  for 
you  to  say,  ‘We  care  enough  about  secu¬ 
rity  to  let  you  do  it  full-time,  and  we’ll 
keep  your  skills  honed  too,’”  says  Paller. 
Consider  giving  them  the  training  to 
become  dedicated  security  staffers.  But 
how  do  you  get  started? 

First,  ask  for  volunteers.  Boni,  who’s  built 
nearly  his  entire  security  staff  by  reposition¬ 
ing  IT  people,  says  that  has  worked  best  for 
him.  “I’ve  found  that  they  just  come  out  of 
the  woodwork,”  he  says. 

When  deciding  whom  to  take,  don’t  just 
look  for  technical  skills.  Check  for  honesty 
and  ethics  (consider  making  a  background 
check  if  they  didn’t  have  one  when  they  were 
hired)  and  look  for  interpersonal  skills.  You 
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If  you’re  considering  business  continuity, 
talk  to  the  company  that  invented  it. 


In  1994,  EMC  Corporation  understood  that  protecting  your  information  was 
nothing  less  than  a  make-or-break  proposition. 

US  Patent  5,544,347  brought  our  vision  to  the  world  in  the 
form  of  the  world's  first  business  continuity  software,  SRDF™. 

Today,  SRDF  is  part  of  our  comprehensive  offering  of  patented  technologies, 
focused  partnerships,  and  extensive  expertise  that  helps  keep  your  information  available  in 
the  event  of  a  disaster— and  makes  your  business  more 
productive  every  day  of  the  year. 

To  see  how  the  business  landscape  has  changed,  read  After  September  11:  Lessons  on 
Planning  and  Implementing  Business  Continuity,  a  Sageza  Group  white  paper  that 
examines  what  enterprises  and  their  vendors  are  doing  differently  to  ensure  data  continuity. 

www.EMC.com/ciolessons 


EMC2 

where  information  lives 


EMC'  and  EMC  are  registered  trademarks  and  SRDF  and  where  information  lives  are  trademarks  of  EMC  Corporation.  Copyright  ©  2002  EMC  Corporation.  Ail  rights  reserved. 


Security  Staffing 


Where  to  Get  Security  Certification 

GIAC  (general  intrusion  analyst  certification),  offered  by  SANS.  Certifications  include 
intrusion  detection,  firewall  analysis  and  incident  handling.  The  courses  include  five  or 
six  days  in  the  classroom  and  then  students  have  10  weeks  to  complete  the  practical 
assignment  and  take  the  exam.  Training  ranges  from  $2,000  to  $3,000.  Certification 
without  training  costs  $425.  www.giac.org 

CISA  (certified  information  systems  auditor),  offered  by  Information  Systems  Audit 
and  Control  Association  (ISACA).  This  course  is  intended  for  auditors,  but  it  provides 
a  useful  broad-based  education  for  security  personnel.  The  exam  requires  a  minimum 
of  20  hours  of  classroom  study  and  self-study,  and  the  cost  of  the  review  course  ranges 
from  free  to  several  hundred  dollars,  depending  on  the  local  ISACA  chapter  giving  the 
course.  ISACA  also  offers  an  intensive  two-and-one-half-day  educational  conference 
on  network  security,  which  costs  $895.  www.isaca.org/certl.htm 

CISSP  (certified  information  systems  security  professional),  offered  by  International 
Information  Systems  Security  Certification  Consortium.  Few  new  security  workers 
will  seek  this  certification  right  away,  which  focuses  on  high-level  security  issues  at  a 
conceptual  level.  Three  years  of  security  experience  is  required  to  take  the  test.  But  the 
course  itself  is  open  to  anyone  with  $3,000  and  a  week  to  take  it,  and  practitioners  say 
it’s  a  valuable  educational  experience,  www.isc2.org 


want  someone  who  will  work  out  differences 
with  internal  customers  over  security  needs 
versus  business  requirements.  “An  individ¬ 
ual  with  a  collaborative  touch  will  listen  to 
what  the  business  needs  are  and  find  a  solu¬ 
tion  without  falling  back  on  a  right/wrong, 
black/white  approach  that  will  anger  the 
user,”  says  Cardinal  Health’s  Hartmann. 

Once  you’ve  identified  the  best  candi¬ 
dates,  get  them  trained.  At  the  very  least, 
they  need  training  in  general  Security  101 
issues,  such  as  network  security  and  secu¬ 
rity  forensics,  says  Steve  Katz,  former  chief 
information  security  and  privacy  officer  of 
Citigroup  and  Merrill  Lynch,  and  now  an 
independent  consultant  in  Melville,  N.Y. 
Then  they  can  learn  more  discrete  special¬ 
ties,  such  as  firewall  administration  and 
intrusion  detection.  There  are  several  ways 
to  train  them,  including  the  following. 

Have  consultants  train  your  staff.  Train¬ 
ing  your  new  security  people  could  take 
months.  In  the  interim,  someone  has  to  han¬ 
dle  your  security  needs,  and  most  likely  that 
will  be  a  consultancy.  That  same  company 
xcan  be  a  great  training  resource,  says 
Hartmann,  who’s  had  security  companies 
and  Big  Five  companies  train  some  of  his 
security  people.  This  training  can  be  largely 
hands-on,  and  most  companies  will  be  happy 
to  negotiate  it  into  the  contract,  says  Verdon. 

Offer  certification  courses.  Experts  say 
certification  isn’t  necessary  for  security  pro¬ 
fessionals — it’s  really  experience  and  skills 
that  count.  Nonetheless,  putting  your  staff 
through  certification  courses  can  be  valuable, 
and  it  doesn’t  have  to  be  expensive.  Organi¬ 
zations  such  as  Computer  Security  Institute, 
Information  Systems  Audit  and  Control 
Association,  International  Information 
Systems  Security  Certification  Consortium 

cio.com 

Read  more  about  staffing  for  security  in 

SECURITY  CHOICES  YOU  NEED  TO 
MAKE  at  www.cio.com/printlinks,  and 
check  out  our  SECURITY  RESEARCH 
CENTER  at  www.cio.com/security. 


and  SANS  offer  broad-based  training  that 
can  ultimately  lead  to  certification. 

Have  vendors  provide  training.  Security 
products  vendors  such  as  Check  Point 
Software  Technologies,  Cisco  Systems  and 
Symantec  all  provide  extensive  training  on 
their  tools,  some  of  which  lead  to  their  own 
certifications.  Paller  says  this  kind  of  training 
is  as  important  as  conceptual  training.  But 
he  warns  that  vendor  training  is  expensive. 
Check  Point  certifications,  for  example,  can 
cost  up  to  $4,300. 

Organize  internships.  Boni  recommends 
sending  security  people  to  other  companies 
to  have  them  intern  with  more  experienced 
professionals.  It’s  easier  if  your  company  is 
affiliated  with  a  larger  organization,  he  says, 
but  other  companies  might  also  offer  this 
opportunity,  known  as  a  secondment. 
“Basically  they’ll  take  your  staff  person’s 
effort  in  exchange  for  free  training  and  call 
it  even,”  he  says. 

Keep  up  with  the  times.  Because  secu¬ 
rity  is  a  rapidly  changing  field,  ensure 


that  your  staff  takes  advantage  of  online 
threat-tracking  resources  such  as  SANS’s 
Incidents.org  and  Bugtraq  at  Security- 
Focus.com.  Staffers  should  also  attend  the 
most  important  conferences,  such  as  the 
RSA  Conference  and  the  SANS  Conference, 
where  they’ll  network  with  peers.  Finally, 
says  Schwartz,  security  staff  should  update 
you  about  new  threats  on  a  weekly  basis. 
“If  the  CIO  gets  an  e-mail  alert  and  sees 
something  he’s  never  heard  about  from  his 
security  team,  it’s  an  indicator  that  things 
aren’t  going  as  they  should,”  he  says. 

Of  course,  none  of  the  steps  outlined  in  this 
article  will  help  you  if  you  don’t  establish 
security  consciousness  throughout  your  entire 
IT  organization,  says  Schwartz.  “You  can  hire 
a  million  security  people  and  not  solve  your 
problems  if  security  isn’t  embedded  deep 
within  everything  you  do  in  IT.”  HP! 


If  you  have  insights  to  share  of  security  staffing,  let 
Senior  Writer  Sarah  Scalet  know  at  s scalet@cio.com. 
Erik  Berkman  is  a  former  senior  writer  with  CIO. 
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What  does  it  take  to  turn  an  obstacle  into  a  benchmark 
victory?  Most  executives  answer  "Vision." 

A  powerful  enterprise  project  management 
solution  can  deliver  dashboard  visibility  into 
all  of  your  projects:  giving  you  the  power  and 
the  wisdom  to  align  projects  with  business 
strategy  and  mitigate  risk. 

ENTERPRISE  PROJECT 
MANAGEMENT 
Vision.  Focus.  Insight. 

With  proven  enterprise  project 
management  solutions  from  Primavera, 
executives,  managers  and  all  team 
members  have  valuable  insights  into 
performance  and  resource  priorities  at 
every  stage  of  the  project  life  cycle. 

Primavera  provides  the  clearest  real¬ 
time  project  portfolio  management  and 
analysis  solutions  ever  developed.  Now 
you  can  have  the  vision  to  see  what's  coming, 
the  focus  to  ensure  accountability,  and  the 
insight  to  analyze  your  R.O.I. 

With  Primavera,  you  can  have 
the  20/20  foresight  necessary  to 
bring  your  business  strategies— 
and  your  company's  success¬ 
ive  sharp  focus. 

OUR  KNOWLEDGE 
IS  YOUR  POWER. 

Get  your  FREE  copy  of  "Achieving  Your  Vision: 

Aligning  IT  Investment  with  Business  Strategy."  Learn  how 
to  integrate  the  most  effective  project  management  system  ever 
developed  with  this  compilation  of  dynamic  theory  and  real-life 
practical  applications  as  reported  by  industry  experts. 

Sharpen  your  competitive  edge  now  at 

www.primavera.com/vision 

Cb  PRIMAVERA 

^  project  management  software  for  business  success 
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Vision 

Critical 


CARL  WILSON,  MARRIOTT  INTERNATIONAL 
EXECUTIVE  VICE  PRESIDENT  AND  CIO 


Marriott's  Harbor  Beach  Resort 
and  Spa  in  Fort  Lauderaale,  Ffa. 


It’s  one  company  but  two  cultures.  Marriott  and  the  Ritz-Carlton  work 


very  other  month,  Marriott  International  convenes 

its  technology  brain  trust  at  its  Washington,  D.C.,  headquarters.  The  hos¬ 
pitality  giant’s  senior  IT  staff  meets  to  hash  out  how  a  corporation  with 
six  business  units,  10  hotel  brands,  1,300  technology  staffers,  2,200  of 
what  Marriott  calls  operating  units  (which  are  mostly  hotels)  and 
140,500  employees  will,  on  the  whole,  approach  technology.  At  the  head 
of  the  table  sits  Marriott  Executive  Vice  President  and  CIO  Carl  Wilson. 


Reader  ROI 

►  Learn  how  a  corporate 
and  a  divisional  CIO 
negotiate  differing  IT 
imperatives 

►  Discover  how  IT  is 
changing  from  a 
tactical  tool  to  a 
strategic  essential  in 
the  hospitality  industry 
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Leadership 


- 


to  align  different  approaches  with  common  goals,  by  scott  berinato 


His  homegrown  CRM  system,  Marriott 
Rewards,  has  enrolled  more  than  10  million 
members.  Wilson  is  now  thinking  about 

(/) 

2  check-in  kiosks.  A  guest  would  enter  the 
o  lobby,  swipe  a  Marriott  Rewards  card  at  a 
|  kiosk,  and  the  machine  would  spit  out  a  room 
“  assignment  and  a  keycard.  This  would  save 
§  business  travelers  time,  give  them  a  sense  of 

—i 

|  independence  and  control,  and  free  the  hotel 

s  desk  to  focus  on  more  valuable  customer  serv- 

< 

^  ice  tasks.  Kiosks  would  also  integrate  nicely 

O 

with  systems  such  as  billing  and  CRM. 

Also  at  the  IT  table  is  Pam  Angelucci,  vice 


president  of  IT  and  CIO  of  the  jewel  in 
Marriott’s  crown,  The  Ritz-Carlton  Hotel 
Co.  Angelucci  wants  nothing  to  do  with 
kiosks.  To  Angelucci,  kiosks  at  the  43  Ritz- 
Carltons  worldwide  would  be  like  ATMs  for 
Swiss  bank  accounts:  inappropriate.  Ritz- 
Carlton  guests,  research  suggests,  want  to  feel 
like  they’re  at  Mom’s  house,  and  Mom 
would  never  have  a  kiosk  in  the  vestibule.  So 
if  Wilson  does  eventually  pilot  the  kiosk  pro¬ 
gram,  the  Ritz-Carlton  will  likely  opt  out. 

Wilson’s  goal  for  these  meetings  is  to  cre¬ 
ate  a  corporate  technology  policy  and  push 


for  IT  standardization.  He  is  looking  for 
areas  where  Marriott  can  use  its  size 
($20  billion  in  2001  revenue)  to  create 
economies  of  scale  and  generate  efficiencies, 
shortening  time-to-market  on  new  technol¬ 
ogy  programs.  Standardization  will  also 
yield  savings  in  areas  such  as  training  and 
staffing.  For  Wilson  and  Marriott,  the  more 
standardization  the  better. 

Angelucci,  however,  comes  to  these  meet¬ 
ings  to  promote  the  uniqueness  of  the  Ritz- 
Carlton  brand.  That  often  means  raising  her 
voice  against  standards  and  arguing  that  her 
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Leadership 


hotels  should  be  the  exception  to  Marriott’s 
rules.  This  is  a  dichotomy  familiar  to  any 
corporate  CIO  who  seeks  to  rationalize  IT 
across  business  units,  and  to  any  divisional 
CIO  who  understands  the  singular  needs  of 
a  business  unit  within  a  larger  corporate 
entity.  At  Marriott  today,  these  challenges 
are  particularly  urgent.  In  the  hospitality 
business,  IT  is  moving  from  cost  center  to 
profit  center.  In  hotel  parlance,  it’s  moving 
from  the  back  of  the  house,  where  the  busi¬ 
ness  is  run  in  florescent-lit  cubicles,  to  the 
front  of  the  house,  where  guests  wander  and 
appearance  matters. 

How  Angelucci  and  Wilson  manage  this 
change — and  how  they  manage  their  differ¬ 
ences — will  define  their  success  as  business 
and  IT  leaders.  And  meeting  these  challenges 
successfully  will  keep  those  every-other- 
month  meetings  as  pleasant  and  productive 
as  they  both  wish  them  to  be. 

Where  the  CIOs  Differ 

THERE  ARE  NINE  OTHER  MARRIOTT  HOTEL 
brands,  including  the  Fairfield  Inn  (“Yes,  you 
can  feel  a  little  spoiled  for  $49  to  $79  per 
night”),  Renaissance  (“Haven’t  you  always 
searched  for  a  hotel  that’s  more  like  you?”) 
and  Courtyard  (“The  hotel  designed  by  busi¬ 
ness  travelers”).  Then  there’s  the  Ritz. 

The  Ritz-Carlton,  which  Marriott  acquired 
in  1995,  is  different.  Unlike  every  other 
Marriott  hotel,  it  has  its  own  CIO.  Unlike 
every  other  Marriott  hotel,  it  has  its  own 
headquarters  (in  Atlanta).  But  those  are  only 
the  superficial  differences. 

At  Marriott,  Wilson  focuses  on  organiza¬ 
tion,  architecture,  purchasing  and  corporate 
application  development.  The  CIO  of 
Marriott  keeps  his  eye  on  MAR  (Marriott’s 
NYSE  ticker  symbol)  and  maximizing  share¬ 
holder  value. 

Angelucci ’s  focus  is  narrower;  she  thinks 
about  hotel  guests  individually,  not  in  the 
aggregate.  And  given  the  nature  of  her 
guests,  her  predilection  is  toward  less  adven¬ 
turous  technology.  If  the  Ritz-Carlton  CIO 
can  get  software  off-the-shelf,  she  will. 

When  a  question  arises  concerning  a 
Marriott  technology  standard  or  program, 


COMMUNICATI 


Marriott  CIO 
Carl  Wilson's  Rules 
for  Working  with 
a  Subsidiary 


Don’t  standardize 

first  and  then  allow  exceptions.  Let 
the  subsidiaries  develop  their 
processes  and  then  look  for  obvious 
targets  for  standardization. 

Take  the  time  to  understand 
the  unique  culture  of  a  subsidiary  and 
what  that  means  to  your  overall  IT 
policy.  Learn  how  best  to  work  with 


Angelucci’s  first  question  is,  How  will  it 
affect  the  Ritz-Carlton  guest?  When  Marriott 
considers  a  Ritz-Carlton  IT  process  that  it 
might  use  as  a  standard  across  the  corpora¬ 
tion,  Wilson’s  first  question  is,  Can  it  scale? 

How  They  Like  Their  CRM 

THE  DIFFERENCES  BETWEEN  MARRIOTT’S  AND 
Ritz-Carlton’s  CRM  systems  clearly  illu¬ 
minate  the  differences  between  the  two  IT 
cultures. 

Class  is  the  Ritz-Carlton’s  4-year-old 
CRM  database.  It  keeps  detailed  data  on 
1.4  million  Ritz-Carlton  guests — data  col¬ 
lected  by  anyone  who  sees  or  hears  anything 
they  believe  would  make  the  guest  more 
comfortable.  According  to  the  20-rule  pam¬ 
phlet  that  the  Ritz-Carlton  issues  every 
employee,  “To  provide  the  finest  personal 
service  for  our  guests,  each  employee  is 
responsible  for  identifying  and  recording 
individual  guest  preferences.”  So  if  a  guest 
happens  to  mention  to  a  waiter  that  she  likes 
chrysanthemums,  the  waiter  must  note  that 
fact.  Eventually,  the  information  will  find  its 
way  into  Class,  and  the  guest  could  find 
chrysanthemums  in  her  room  on  her  next 
visit.  Angelucci  says  any  quirk,  allergy  or 
preference  can  and  will  be  noted  and  entered 
into  Class.  Red  or  white  wine.  Rooms  with 


morning  sun.  The  hometown  newspaper. 

On  the  other  hand,  the  CRM  system  for 
every  other  Marriott  hotel,  Marriott 
Rewards,  is  a  Herculean,  massively  inte¬ 
grated  system.  It’s  a  reward  system  in  the 
classic  frequent  flier  sense.  “Hold  a  meeting 
with  Marriott  and  earn  up  to  100,000 
points!”  was  one  recent  promotion.  Those 
points  can  be  redeemed  for  special  offers. 
Integration  with  the  airlines’  Sabre  reserva¬ 
tion  system  allows  guests  to  turn  a  dollar 
spent  at  a  Marriott  hotel  into  frequent  flier 
miles.  Integration  with  the  Skymall  shopping 
website  lets  guests  redeem  points  for  mer¬ 
chandise. 

Marriott  built  both  Class  and  Rewards. 
They  even  share  some  back-end  technology. 
But  while  Rewards  looks  outward,  Class 
looks  in. 

Their  Digital  Divide 

FOR  ANGELUCCI,  TECHNOLOGY  IS  AN  OFF-THE- 
shelf  tool  she  can  customize  with  process  in 
the  Ritz-Carlton  way.  So  when  she  needed  to 
upgrade  and  standardize  her  core  hotel  man¬ 
agement  system  last  year,  she  chose  Fidelio, 
a  system  she  praises  as  tried  and  true. 

Her  choice  may  at  first  seem  surprising 
given  that  this  kind  of  software,  called  prop¬ 
erty  management  in  hospitality  lingo,  is  the 
beating  heart  of  any  hotel.  Some  two  dozen 
systems,  from  HVAC  controls  to  cash  regis¬ 
ters  to  the  systems  that  cut  room  keys,  are 
networked  into  the  property  management 
system.  The  Ritz-Carlton  had  been  using  a 
system  called  Encore  since  1982,  but  the  com¬ 
pany  that  made  Encore  didn’t  exist  anymore, 
and  support  was  hard  to  find.  Angelucci 
could  have  seen  this  as  an  opportunity  to 
introduce  the  latest,  greatest  property  man¬ 
agement  technology,  but  instead  of  a  DVD 
player,  she  chose  a  solid  $85  VCR.  Ritz- 
Carlton  Technical  Systems  Director  Darrin 
Hubbard,  who  began  his  hospitality  indus¬ 
try  career  14  years  ago  as  a  15-year-old  dish¬ 
washer,  calls  it  prudent  technology.  “Fidelio 
has  no  bells  and  whistles,”  he  says.  “What  it 
has  is  a  track  record  of  18,000  deployments. 
It’s  well  debugged  by  now.” 

From  Marriott’s  perspective,  Fidelio  is 
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simply  old.  That  means  it  will  have  to  be 
replaced  sooner  than  a  newer  system.  And 
Marriott  is  not  using  Fidelio  in  any  of  its  other 
U.S.  hotels,  although  it  is  using  it  in  its  full- 
service  overseas  hotels.  Choosing  a  property 
management  system  the  company  had  already 
deployed  stateside  would  have  helped 
Marriott  integrate  Ritz-Carlton’s  and  Mar¬ 
riott’s  infrastructures.  But  it  was  not  to  be. 

Angelucci  says  she  will  not  risk  a  bad  cus¬ 
tomer  experience  on  the  chance  that  a  new 
technology  might  give  the  customer  a  better 
one.  If  she  can’t  guarantee  a  technology 
won’t  negatively  affect  the  Ritz-Carlton 
guest,  Angelucci  won’t  consider  it. 

Wilson  understands.  In  fact,  he  says  one  of 
his  rules  for  working  with  the  Ritz-Carlton — 
and  for  standardization  in  general — is  to 
work  backward.  Conventional  wisdom  says 
that  the  parent  company  creates  a  standard 
and  then  allows  exceptions  where  necessary. 
Wilson,  however,  lets  the  brands  create  their 
own  processes.  When  the  senior  IT  folks 
meet,  they  look  at  the  various  approaches 
and  then  identify  targets  for  consolidation. 

“We  can’t  start  by  saying  what’s  the 
cheapest  way  to  provide  a  service,”  Wilson 
says.  “If  we  start  by  driving  costs  out  and 
forcing  brands  into  overall  standards,  we’ll 
lose  the  trust  of  our  guests.  We  have  to  make 
conscious  decisions  to  let  the  hotels  be  dif¬ 
ferent  where  it  makes  sense.” 

Managing  Differences 

ANGELUCCI  COMPARES  THE  RELATIONSHIP 
between  her  group  and  Wilson’s  to  a  good 
marriage.  The  phrase  give-and-take  comes 
up  often.  “We  feel  aligned  in  general,”  says 
Angelucci.  “But  sometimes  you  just  have  to 
agree  to  disagree  and  move  forward.” 

Ritz-Carlton  shares  a  few  systems  with 
Marriott.  There’s  Marsha,  for  example, 
Marriott’s  homegrown  reservations  system. 
But  more  often  than  not,  even  for  prosaic 
technology  decisions,  Angelucci  chooses  to  be 
different — and  Wilson  lets  her  be  different. 

Wilson,  for  example,  has  been  testing  a 
migration  to  Microsoft’s  ActiveDirectory 
services,  but  Angelucci  has  decided  to  stay 
with  Novell  directory  services  for  now,  and 
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will  consider  moving  to  ActiveDirectory 
later.  Marriott  signed  a  long-term  deal  with 
OnCommand,  a  digital  in-room  entertain¬ 
ment  network.  The  Ritz-Carlton,  however, 
maintained  its  long-term  deal  with  another 
digital  provider,  LodgeNet. 

Two  years  ago,  Marriott  standardized  on 
PeopleSoft  for  accounting.  Again,  Angelucci 
kept  the  Ritz-Carlton  separate,  using  Scala,  a 
smaller-scale  system.  One  reason  for  that 
was  because  Marriott’s  accounting  is  done  in 
13,  not  12,  periods  each  year.  Ritz-Carlton 
accounts  by  the  month.  “We  all  agreed  we’d 
get  [to  PeopleSoft],”  says  Angelucci.  “But  it’s 
not  the  right  time.” 

This  kind  of  give  (“We’ll  get  there”)  and 
take  (“It’s  not  the  right  time”)  is  typical  of 
the  way  Angelucci  manages  the  inevitable 
disagreements  between  her  and  Wilson. 
When  check-in  kiosks  are  brought  up,  she 
says,  “Really,  they’ll  be  great  in  certain  prop¬ 
erties.  Not  here.” 

Angelucci  and  Wilson  have  a  history. 
They  worked  together  at  paper,  pulp  and 
packaging  colossus  Georgia-Pacific  up 
through  1997.  Wilson  was  CIO  and 
Angelucci’s  job  was  to  explain  his  IT  initia¬ 
tives  to  the  business  side.  Wilson,  in  fact, 
encouraged  Angelucci  in  1998  to  apply  for 
the  vacant  CIO  job  at  the  Ritz-Carlton. 


Angelucci  chalks  up  her  success  in  main¬ 
taining  the  Ritz-Carlton  culture  to  education 
and  preparedness.  Education,  Angelucci 
says,  has  been  her  biggest  challenge.  Right 
now,  she  is  trying  to  get  Marriott  IT  people 
to  visit  Ritz-Carltons.  The  more  Marriott 
people  that  experience  “the  Ritz-Carlton 
way,”  her  argument  goes,  the  easier  it  will 
be  for  them  to  understand  technology  deci¬ 
sions,  even  if  those  decisions  make  it  harder 
for  Marriott  to  lower  costs  and  standardize. 

For  preparedness,  Angelucci  leans  on  her 
staff  of  nine.  They  prepare  presentations  and 
technical  materials  that  Angelucci  presents 
at  the  IT  brain  trust  meetings.  Similarly,  she 
returns  from  the  meetings  with  notes  that 
she’ll  hand  over  to  her  staff  for  analysis. 

“It’s  a  matter  of  understanding  what  I’m 
presenting  to  Marriott  so  that  it  doesn’t 
sound  like  we’re  asking  for  an  exclusion 
from  a  program  just  because  we’re  the  Ritz- 
Carlton,”  Angelucci  says. 

Case  Study:  The  Ugly  Box 
Negotiations 

FOR  WILSON,  WHO  HAS  BEEN  MARRIOTT’S 
CIO  for  five  years,  new  applications — 
omnipresent  Internet  access,  smart  conference 
rooms  with  high-speed  digital  lines  for  tele¬ 
conferencing,  online  shopping  and  reserva¬ 
tion  service  through  the  digital  TV  in  each 
room — represent  the  best  hope  for  a  solvent 
future.  And  if  the  stuff  doesn’t  always  work, 
well,  the  future  comes  with  risk.  More  impor¬ 
tant,  it  comes  with  fixes. 

Angelucci,  on  the  other  hand,  believes  that 
her  guests,  who  are  paying  anywhere  from 
$400  to  well  over  $1,000  per  night,  will  not 
tolerate  technologies  that  don’t  work  the  first 
time,  every  time. 

So  when  a  customer-touching  IT  initia¬ 
tive — high-speed  Internet  access  in  rooms — 
got  contentious,  Wilson’s  patience  and 
Angelucci’s  diplomatic  skills  were  tested. 

In  this  case,  Marriott  purchased  a  system 
from  STSN,  a  Salt  Lake  City  company  that 
specializes  in  broadband  connections  for  the 
hospitality  industry.  The  Ritz-Carlton,  eager 
to  get  high-speed  access,  agreed  not  only  to  go 
along  with  Marriott  but  also  to  be  one  of  the 
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hotel  brands  that  would  pilot  the  program. 

This  was  an  all-in-one  package.  STSN  pro¬ 
vided  the  DSL  broadband  connection  and  the 
box  it  would  come  through.  STSN’s  boxes, 
which  sit  on  a  desk  in  each  room,  provided 
an  autoconfiguration  feature  that  made  it  lit¬ 
erally  plug-and-play.  STSN  also  handled  the 
ISP  relationship  for  Marriott.  And  it  did  all 
this  for  free.  STSN  would  make  its  money 
through  a  revenue  sharing  deal.  Guests  would 
be  charged  on  a  per-day  basis.  STSN  would 
take  most  of  that  fee,  but  the  higher  the  vol¬ 
ume  of  usage,  the  higher  Marriott’s  cut. 

For  the  Ritz-Carlton,  the  plug-and-play 
feature  offset  the  fact  that  the  boxes  were, 
well,  ugly.  Looks  are  important  at  the  Ritz- 
Carlton,  where  the  motto  is:  “We  are  ladies 
and  gentlemen  serving  ladies  and  gentle¬ 
men.”  But  Angelucci  wasn’t  going  to  fight  a 
major  technology  initiative  over  aesthetics, 
especially  as  her  guests  were  demanding 
high-speed  Internet  access. 

The  pilot  went  well  and  the  Ritz,  along 
with  all  of  Marriott,  started  deploying. 

But  then  some  of  the  boxes  proved  to  be 
faulty.  Service  was  spotty.  The  connection  to 
the  room  failed  15  percent  to  25  percent  of 
the  time,  partly  because  some  guests  were 
unwittingly  unplugging  the  ugly  things. 

Wilson,  according  to  observers,  ap¬ 
proached  the  problem  as  something  to  fix. 
Marriott  had  invested  too  much  just  to 
ditch  the  service  and  try  again. 

Angelucci  didn’t  see  it  that  way.  The 
ladies  and  gentlemen  were  already  getting 
complaints  from  the  ladies  and  gentlemen. 
“We  got  on  the  phone,  Carl  [Wilson],  me 
and  the  business  person  in  charge  of  the 
relationship  with  STSN,”  Angelucci  says, 
“We  said  that  until  there’s  a  better  solution 
from  STSN,  the  Ritz-Carlton  is  better  off 
doing  this  on  our  own. 

“I  had  to  provide  the  business  reasons  for 
the  decision,”  Angelucci  continues.  “I  said, 
‘It’s  not  good  for  us  to  be  on  the  front  end 
with  the  technology.  Our  guests  are  tem¬ 
peramental.  They’ll  let  it  go  once  if  some¬ 
thing’s  wrong  with  the  service,  but  if  it  hap¬ 
pens  twice,  that’s  trouble.’ 

“In  hindsight,”  she  says,  “it  probably 
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wasn’t  the  best  idea  for  us  to  pilot  it,  because 
our  guest  set  is  probably  the  most  critical.” 

In  the  end,  Wilson  understood  the  rami¬ 
fications  of  forcing  the  Ritz-Carlton  to  stay 
with  the  original  STSN  system,  as  Marriott 
planned  to  do.  He  agreed  to  let  Angelucci 
and  her  staff  pursue  alternatives,  where  they 
were  viable.  Today,  about  half  of  all  Ritz- 
Carlton  hotels  still  have  the  STSN  connec¬ 
tion.  But  in  new  hotels,  with  higher-quality 
category-5  wiring,  Ritz-Carlton  was  able  to 
find  (with  Alpharetta,  Ga. -based  Elastic 
Networks,  which  was  recently  acquired  by 
Paradyne  Networks)  a  fully  meshed  Ether¬ 
net  solution.  The  team  tried  the  new  system 
at  the  Half  Moon  Bay  Ritz-Carlton  in 
California.  Since  it  avoided  DSL  completely, 
there  was  no  need  for  the  little  boxes  that 
guests  could  unplug — they  would  use  a  wall 
socket.  Hubbard  says  the  disconnect  rate 
has  dropped  dramatically. 

Marriott  would  have  liked  it  if  the  Ritz- 
Carlton  could  have  done  this  with  STSN, 
but  STSN  simply  didn’t  have  the  capability 
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to  offer  the  new  service  at  the  time.  The 
Ritz-Carlton  would  be  the  exception  to  the 
rule  again,  and  a  Marriott  standard  would 
have  to  be  amended,  again. 

In  the  end,  Wilson  had  a  happy  sub¬ 
sidiary  that  was  able  to  go  out  on  its  own. 
Angelucci  had  a  happy  parent  company 
because  her  guests  were  happy  with  the  new 
solution,  and  because  she  has  agreed  to 
reconsider  STSN  now  that  it  has  come  up 
with  a  solution  similar  to  Elastic’s. 

The  front  of  the  house  was  back  in  order. 

Together  at  Last 

ULTIMATELY,  WILSON  AND  ANGELUCCl’S  RELA- 
tionship  works  because  they  both  share  the 
same  goal. 

Wilson  is  averse  to  even  acknowledging 
that  there  may  be  cultural  differences  between 
the  Ritz  and  Marriott — as  if  by  doing  so  he 
might  jinx  the  chemistry  Angelucci  and  he 
have  going.  He  sums  it  up  this  way:  “When 
I  open  The  Wall  Street  Journal,  I  see  one  com¬ 
pany — Marriott  International.  Now,  that’s 
made  up  of  many  brands,  but  we  always 
work  in  a  way  that  maximizes  shareholder 
value.  That’s  part  of  Marriott’s  culture.” 

The  process  of  maximizing  shareholder 
value  may  be  less  obvious  at  the  Ritz,  but 
it’s  no  less  relentless.  At  a  training  session 
for  new  Ritz-Carlton  employees  at  the 
recently  opened  Battery  Park  hotel  in  New 
York  City,  the  trainees  are  asked,  “How 
much  of  our  guests’  disposable  income  do 
we  want  to  capture?” 

They  reply  in  unison,  “All  of  it.” 

“Sometimes  I  have  to  remind  the  staff 
about  that,”  Angelucci  says  later.  “People 
think  this  culture,  where  we  say  ‘Certainly’ 
and  ‘My  pleasure,’  is  a  gimmick.  It’s  not. 
Everyone  here  really  is  polite  and  profes¬ 
sional.  But  look,  we’re  trying  to  make 
money  here.” 

And  on  that  point,  the  Ritz-Carlton  and 
Marriott  are  in  complete  and  total  har¬ 
mony.  EEI 


Does  your  corporate  parent  understand  you?  Does 
your  subsidiary  get  on  your  nerves?  Tell  Senior 
Writer  Scott  Berinato  about  it  at  sberinato@cio.com. 
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When  you  need  more,  just  turn  it  up.  It’s  true  for 
heat,  light  and  every  other  utility.  And  now  it’s  true 
for  e-business.  Need  more  storage?  Enhanced 
procurement?  No  problem.  Just  tell  us  what,  where 
and  when.  With  e-business  on  demand™  we 
handle  design,  implementation  and  integration.  And 
then  we  deliver  everything,  as  a  secure,  managed 
service,  via  the  Internet.  It’s  The  Next  Utility.™ 
It’s  simple.  And  everybody  understands  simple. 
Visit  ibm.com/e-business/ondemand  or  ask  for 
on  demand  at  800  IBM-7080. 
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Web  Services:  Fact  or  Fiction? 
We’ll  Tell  You  What  The 
Hype-Meisters  Won’t. 

Web  Services  pioneers  expose  some  of  the 
big  myths  behind  this  IT  trend. 
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Discussion  Topics 

•  Are  Web  Services  the  cure  for  virtually  every  IT  ill? 

•  What  are  the  most  over-hyped  Web  Services 
controversies? 

•  What  do  you  need  to  know  before  you  implement 
Web  Services? 

•  What  are  the  potential  pitfalls  and  how  can  you 
avoid  them? 


What  are  the  hidden  opportunities  behind  Web 
Services?  1 
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Tune  in  now  to  discover  the  real  business  and  IT  benefits  behind 
Web  services  and  how  you  can  get  started  today. 
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You  can’t  tell  when  you’re  winning  if  you  don’t  keep  score,  and 
the  Balanced  Scorecard  helps  track  your  hits  and  misses 

BY  ERIC  BERKMAN 


Reader  ROI 

►  Learn  the  proper  steps  to 
take  when  implementing  the 
Balanced  Scorecard 

►  Understand  how  to  determine 
the  right  type  and  the  right 
quantity  of  metrics 

►  Decide  whether  to  roll  out 
the  Scorecard  within  IT  or 
companywide 


Mobil  oil  (now  exxon 

Mobil)  leaped  from  last  to 
first  in  profitability  within  its 
industry  from  1993  to  1995 — 
a  rank  it  maintained  for  the 
next  four  years.  Cigna  Insurance  was  losing 
$1  million  a  day  in  1993,  but  within  two 
years  it  was  in  the  top  quartile  of  profitability 
in  its  industry.  Then  in  1998  it  spun  off  a 
$3.5  billion  division.  What’s  the  key  to  these 
dramatic  turnarounds?  These  companies 
attribute  at  least  part  of  the  solution  to  hav¬ 
ing  implemented  the  Balanced  Scorecard. 

Developed  in  the  early  1 990s,  this  valua¬ 
tion  methodology  converts  an  organization’s 


value  drivers — such  as  customer  service, 
innovation,  operational  efficiency  and  finan¬ 
cial  performance — to  a  series  of  defined  met¬ 
rics.  Companies  record  and  analyze  these 
metrics  to  help  determine  if  they’re  achieving 
strategic  goals.  A  fully  implemented  Score- 
card  cascades  from  the  top  levels  of  a  com¬ 
pany  all  the  way  down.  Ultimately,  each 
member  of  the  organization  works  off  a  per¬ 
sonal  Scorecard,  striving  to  achieve  personal 
objectives  based  on  measurements  directly 
linked  to  the  corporate  strategy. 

It  is  ideal  to  implement  the  Balanced 
Scorecard  throughout  the  enterprise  because 
that  framework  helps  foster  alignment 
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Al  Grasso,  former  CIO  of  The  Mitre  Corp.,  feels  the  Scorecard  “champion”  has  to  have  the  ear  of  the  CIO. 


between  business  and  IT,  says  David  Norton, 
cocreator  of  the  Scorecard  and  president  of 
the  Balanced  Scorecard  Collaborative  in 
Lincoln,  Mass.  Still,  the  concept  can  work 
within  an  IT  organization  specifically.  (See 
“Can  IT  Keep  Score  by  Itself?”  on  Page  100.) 
The  key  difference  when  the  Scorecard  is 
implemented  within  IT  as  opposed  to  the 
entire  company,  says  Norton,  is  that  the  “cus¬ 
tomer”  is  a  user  within  the  corporation,  not 
an  external  consumer. 

Because  the  Balanced  Scorecard  requires 
every  action  to  answer  to  established  cor- 

cio.com _ 

How  can  the  Scorecard  work  for  IS? 

ASK  THE  SOURCE;  cocreator  David 
Norton  will  answer  your  questions.  Go  to 
the  Web  Connections  box  at  www.cio.com. 


porate  goals,  using  the  Scorecard  within  IT 
can  still  help  promote  alignment  and  elimi¬ 
nate  projects  that  contribute  little  or  no 
strategic  value.  “It  really  changes  the  con¬ 
versation  between  IT  and  business,”  says 
Linda  Bankston,  CIO  of  DuPont  Engineer¬ 
ing  Polymers,  a  $2.5  billion  division  of 
DuPont  Chemicals  in  Wilmington,  Del. 
“The  conversation  is  around  strategy  and 
impact,  rather  than  just  whether  you  can  or 
can’t  do  something.”' 

Nevertheless,  installing  the  Balanced 
Scorecard  within  IT  is  a  challenge.  It 
changes  the  job  approach  of  all  employ¬ 
ees — not  to  mention  how  they’re  evaluated. 
CIOs  need  to  take  a  number  of  necessary 
steps  to  properly  lay  the  groundwork  for  a 
successful  implementation. 

■  Prepare  the  organization  for  change. 

■  Devise  the  right  metrics. 


■  Get  buy-in  at  all  levels. 

■  Plan  to  follow  through  to  completion. 

Before  jumping  in  and  developing  all  sorts 

of  metrics,  sit  down  with  the  rest  of  the  lead¬ 
ership  team  and  define  the  overall  strategy, 
says  Norton.  Strategy  is  typically  articulated 
by  four  or  five  value  drivers,  or  broad  strate¬ 
gic  goals,  for  the  organization.  The  Hilton 
Hotel  Corp.,  for  example,  gears  its  strategy 
and  Scorecard  framework  around  financial 
performance,  customer  service,  efficient 
business  processes,  innovation,  learning  and 
growth.  (See  “Why  Full  Rollout  Isn’t 
Necessary,”  on  Page  96.)  It’s  also  critical  to 
designate  a  Scorecard  champion,  says  Nor¬ 
ton.  When  implementing  the  Scorecard 
within  an  IT  department,  that  champion 
should  be  someone  other  than  the  CIO. 
“The  CIO  is  responsible  for  using  and  driv¬ 
ing  the  Scorecard,”  says  Norton.  “But  you 
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IT  Value 


Why  Full  Rollout  Isn’t  Necessary 

The  Scorecard  can  help  IT  by  providing  strategic  guidelines, 
even  if  IT  isn’t  directly  subjected  to  its  scrutiny 

The  Hilton  Hotel  Corp.’s  experience  with  the  Balanced  Scorecard  proves  that  an  IT 
organization  can  benefit  from  the  Scorecard,  even  if  it’s  never  rolled  out  within  the 
department,  in  1997,  Beverly  Hills,  Calif.-based  Hilton  implemented  the  Scorecard 
companywide  to  maximize  revenue,  improve  guest  satisfaction  and  operational 
effectiveness,  and  foster  internal  learning  and  growth.  However,  CIO  Tim  Harvey 
never  implemented  the  Scorecard  within  IT. 

Still,  Harvey  says  the  Scorecard  has  been  a  critical  tool  for  ensuring  IT’s  continued 
value.  Though  IT  doesn’t  have  its  own  Scorecard,  Harvey  says,  no  IT  project  is 
commissioned  without  tying  it  back  to  one  of  the  major  value  drivers  on  the  Hilton 
Scorecard.  For  example,  because  one  of  Hilton’s  key  drivers  is  operational  effective¬ 
ness,  Harvey  has  made  a  major  push  to  come  up  with  technology  to  minimize 
manual  efforts  in  conducting  hotel  business.  "We’re  constantly  looking  at  what  kind 
of  technology  we  can  provide  that  will  reduce  cost  as  much  as  possible,”  he  says. 
Harvey  says  using  the  Scorecard  as  a  simple  guidepost— even  without  devising  one 
of  his  own— has  done  wonders  for  IT’s  relationship  with  business.  “It’s  helped  me 
make  sure  that  everything  we  ask  the  corporation  for  money  for  is  in  complete 
alignment  with  the  business,”  he  says.  “As  a  result,  I’ve  seen  the  satisfaction  with 
my  organization  rise.”  -E.B. 


need  an  individual  from  within  IT — maybe 
whomever’s  responsible  for  planning  within 
IT,  or  someone  responsible  for  preparing 
your  finance  or  budgeting  system — to  be 
assigned  responsibility  [for  the  Scorecard].” 

To  succeed  in  the  role,  the  Scorecard 
champion  must  be  capable  of  strategic 
thinking,  understand  the  strategic  view  of 
the  company  and  have  the  ear  of  the  CIO, 
says  A1  Grasso,  former  senior  vice  president 
and  CIO  of  The  Mitre  Corp.,  a  nonprofit 
systems  development  group  based  in 
Bedford,  Mass.  “When  he  has  the  ear  of  the 
decision  maker  in  the  organization,  he  can 
effect  change,”  says  Grasso,  who  imple¬ 
mented  the  Scorecard  at  Mitre’s  New  Jersey 
operations  facility. 

Bill  Schiemann,  CEO  of  Metrus  Group, 
a  Somerville,  N.J.,  consultancy  that  works 
with  the  Balanced  Scorecard,  emphasizes 
that  implementation  has  to  start  at  the  top 
with  the  CIO  (if  done  within  IT)  or  CEO  (if 
done  companywide)  and  the  most  senior 
levels  of  that  person’s  group.  “We  find  it  crit- 
x  ical  to  [agree]  upon  a  set  of  drivers  and 
results  of  their  business  strategy  that  can  be 
measured,”  he  says.  “What  we’ve  seen  not 
work  at  all  is  delegating  the  whole  thing  to 
a  committee  to  go  off  and  work  out  meas¬ 
ures  and  come  back  for  a  blessing.” 

Set  the  Right  Metrics 

Once  the  groundwork  is  set,  the  next  step 
is  to  identify  both  the  right  metrics  and  the 
right  amount  of  metrics  with  which  to  track 
the  company’s  progress  toward  its  organi¬ 
zational  goals.  At  FirstEnergy’s  $5  billion 
utilities  division  in  Morristown,  N.J.  (for¬ 
merly  GPU  Energy),  one  strategic  goal  is  to 
create  “raving  fans”  among  its  customers. 
Its  other  value  drivers  are  reliability,  finance 
and  creation  of  a  winning  culture.  For 


FirstEnergy’s  IT  group,  raving  fans  mean 
internal  customers,  so  CIO  Rick  Fidler  and 
Senior  Process  Analyst  Mel  Brinkman,  who 
is  in  charge  of  FirstEnergy’s  IT  Scorecard, 
have  devised  three  metrics  to  determine 
whether  they’re  meeting  customer  demand. 

■  Percentage  of  projects  completed  on 
time  and  on  budget. 

■  Percentage  of  projects  released  to  the 
customer  by  the  agreed-upon  delivery 
date. 

■  Client  satisfaction  as  indicated  by  cus¬ 
tomer  surveys  completed  at  the  end  of  a 
project. 

FirstEnergy  evaluates  project  managers 
based  on  how  well  they  achieve  their  target 
percentages.  Brinkman  says  that  has  im¬ 


proved  the  customer  experience.  “  [The  Bal¬ 
anced  Scorecard]  puts  our  project  managers 
under  a  microscope  and  forces  them  to  look 
more  closely  at  themselves  and  their  meth¬ 
odology,”  he  says. 

At  Dupont  Engineering  Polymers,  a 
major  value  driver  is  fostering  new  business 
models.  For  Bankston’s  IT  group,  that 
means  streamlining  e-commerce.  Because 
avoiding  manual  transactions  is  a  primary 
goal  of  e-commerce,  Bankston  established 
a  metric  for  her  global  program  manager 
and  e-commerce  technology  manager  to 
reduce  the  number  of  transactions  that 
require  human  interface.  “This  metric  gets 
to  the  real  strategic  purpose  of  having  the 
Internet,”  she  says.  “Having  someone  place 
an  order  online  only  to  get  a  human  involved 
is  really  not  the  goal.” 

Metrics  should  also  relate  to  softer,  less 
technical  strategic  goals  such  as  workforce 
development  and  retention.  At  Mitre,  Gras- 
so’s  managers  are  graded  on  their  ability  to 
keep  low  attrition  rates.  Other  companies 
grade  managers  on  how  many  of  their 


“The  Scorecard  puts  our  project 
managers  under  a  microscope.9’ 

-MEL  BRINKMAN,  SENIOR  PROCESS  ANALYST  FOR  FIRSTENERGY 
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IT  Value 


Remember 

This... 

Three  keys  for  a  successful 
implementation  of  the 
Balanced  Scorecard 

-  TIE  SCORECARD  OBJECTIVES 
TO  INDIVIDUAL  COMPENSATION. 

This  provides  an  incentive  for  employ¬ 
ees  to  take  the  Scorecard  seriously  and 
think  about  their  job  in  strategic  terms. 

■  FOLLOW  THROUGH.  You  need  to 
periodically  review  and  revise  the 
Scorecard  to  keep  it  relevant  as 
strategy  changes. 

■  FIND  THE  RIGHT  TOOLS.  Many 
companies  that  implement  the 
Scorecard  either  buy  or  build  an 
application  to  track  the  different 
metrics  so  anybody  can  look  at  the 
organization’s  progress  toward  its 
goals  in  real-time.  The  Balanced 
Scorecard  Collaborative  has  certified 
about  a  dozen  vendors'  applications, 
including  CorVu,  Hyperion,  Oracle, 
PeopleSoft,  SAP  and  SAS.  -E.B. 


For  Linda  Bankston,  CIO  of  DuPont 
Engineering  Polymers,  the  Balanced 
Scorecard  helps  promote  alignment. 

workers  have  comprehensive  development 
plans — and  how  those  are  progressing. 

It’s  important  to  measure  the  right  fac¬ 
tors,  but  Bankston  warns  against  getting 
metric-happy.  Pursuing  too  many  metrics 
dilutes  the  strategic  purpose,  reducing  it  to 
an  exercise  in  information-gathering.  “You’ll 
spend  too  much  time  reporting  measures 
rather  than  making  a  change,”  she  says. 

Even  with  the  right  number  of  metrics,  you 
shouldn’t  phase  them  in  all  at  once,  cautions 
John  Nordin,  vice  president  and  CIO  of 
Franklin  Park,  Ill. -based  metal  distributor 


A.M.  Castle.  When  Castle  implemented  the 
Balanced  Scorecard  two  years  ago,  his  com¬ 
pany  identified  13  metrics  and  focused  on  all 
of  them  simultaneously  at  the  onset.  “That’s 
13  events  of  discussion,  measurement  and 
debate,”  he  says.  If  he  could  do  it  over,  he 
says,  he’d  take  two  or  three  at  a  time,  debate 
them  and  see  if  they  work.  “It’s  the  idea  of 
creating  small  deliverables  along  the  way,” 
he  says.  “You  get  quick  wins  for  the  organi¬ 
zation.  Otherwise  enthusiasm  wanes  as  the 
world  changes  top  fast.” 

Metrus  Group’s  Schiemann  also  warns 
against  selecting  the  easiest  measures  to 
implement.  “If  you  just  pick  the  things 
you’ve  always  measured  before  and  expect 
different  results  in  the  future,  you’ll  be  sadly 


disappointed,”  he  says.  “All  too  often, 
there’s  the  tendency  to  grab  the  easiest,  most 
readily  available  measures,  missing  the  more 
important  ones  that  may  be  crucial  to  deliv¬ 
ering  high  value  to  your  customers.” 

Get  Buy-In  at  Ail  Levels 

Implementing  an  established  valuation  pro¬ 
gram  like  the  Balanced  Scorecard  is  a  signif¬ 
icant  change  in  the  way  employees  view 
their  job.  The  natural  paranoia  that  comes 
with  change  is  bound  to  surface,  so  it’s 
important  to  ensure  that  everyone  is  into  it 
at  every  level  of  the  company,  from  the  sen¬ 
ior  executives  all  the  way  to  the  entry-level 
employees. 

To  make  that  happen  at  Castle,  Nordin 
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in  CRM,  it's  time  to  take  a  new  look  at  the  industry  leader. 
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IT  Value 


Can  IT  Keep  Score  by  Itself? 

There  are  strong  opinions  on  both  sides  of  the  fence. 

The  answer  is  a  definitive,  “It  depends.  ” 

There’s  considerable  debate  over  whether  the  Balanced  Scorecard  is  an  enterprise¬ 
wide  tool  in  which  IT  plays  a  part,  or  whether  an  IT  organization  can  independently 
adopt  the  Scorecard. 

John  Nordin,  vice  president  and  CIO  of  A.M.  Castle,  a  metals  distributor  in 
Franklin  Park,  III.,  says  it’s  a  mistake  to  try  to  adopt  the  Scorecard  as  an  IT-only 
program.  “Don’t  build  it  in  a  vacuum,"  he  says.  If  an  IT  Scorecard  is  not  built  against 
a  higher-level  Scorecard,  he  says,  there  will  be  no  linkage  between  your  metrics  and 
the  overall  company  strategy,  and  no  guarantee  that  IT  is  creating  value. 

However,  Susan  Dallas,  research  director  with  Gartner  in  Stamford,  Conn.,  says  IT 
can  “absolutely"  do  a  Scorecard  by  itself.  "In  fact,  it's  probably  more  important  that 
IT  has  one  than  any  other  department  because  IT  changes  so  much  and  the  require¬ 
ments  of  being  an  agile  organization  are  so  much  more  important  in  IT,”  she  says. 
"So  it’s  even  more  important  that  IT  have  this  kind  of  forward-looking  approach.” 

Bill  Schiemann,  CEO  of  Somerville,  N.J.,  consultancy  Metrus  Group,  agrees  but 
says  it’s  ideal  for  IT  to  build  a  Scorecard  that  follows  the  enterprisewide  Scorecard. 
That  way  the  technology  strategy  is  firmly  embedded  within  the  overall  business 
strategy. 

If  you  build  an  IT  Scorecard,  seek  feedback  from  other  departments  to  ensure  the 
metrics  are  on  target.  “This  will  also  create  a  gesture  that  you  really  want  to  improve 
service,”  says  Mel  Brinkman,  a  senior  process  analyst  at  FirstEnergy's  Morristown, 
N.J.,  division,  who  spearheaded  the  IT  group’s  Scorecard.  -E.B. 


relied  on  systematic,  organizationwide 
communication  of  the  Scorecard  concept. 
Initially,  Nordin  and  five  other  top-level 
execs  trained  on  the  Scorecard  and  agreed 
it  was  worth  a  look.  Then,  instead  of 
emerging  from  the  mountain  holding  a  pair 
of  tablets  and  an  edict  for  the  organization, 
they  grabbed  the  next  12  managers  down 
the  chain,  trained  them  on  the  Scorecard 
and  solicited  their  feedback. 

They  continued  this  process  until  80  peo¬ 
ple  were  involved.  Only  at  that  point  did 
they  commit  to  the  Scorecard,  sending  those 
80  managers  back  to  their  business  unit  to 
talk  it  up  with  their  employees.  “We  told 
them  to  go  back  and  tell  their  employees 
what  they’d  been  working  on  for  three  days, 
and  to  say,  ‘I’m  not  sure  I’m  convinced — 
what  do  you  think?”’  says  Nordin.  This  tac¬ 
tic  involved  everyone  in  the  entire  organi¬ 
zation — a  critical  factor  in  the  Scorecard’s 
success. 

Once  the  staff  was  ready  to  go,  A.M. 
Castle  hired  a  training  company  that  devel¬ 
oped  visual  “learning  maps”  for  employees 
to  better  understand  the  Scorecard  concept. 
The  company  also  developed  a  board  game 
on  the  Balanced  Scorecard  that  was  similar 
to  Monopoly  and  sent  managers  to  play  the 
game  with  their  business  unit.  “We  lami¬ 
nated  them,  stuck  ’em  on  a  wall  and  gave 
out  game  cards,”  says  Nordin.  “It  was  a 
huge  success.” 


Balanced  Scorecard  Collaborative’s  Nor¬ 
ton  says  that  approach  is  the  most  effective 
way  to  implement  the  Balanced  Scorecard, 
adding  that  the  Monopoly  game  is  a  cool 
idea.  “What  this  tells  me  is  they  understood 
that  to  make  this  work,  they  had  to  push  it 


all  the  way  down  to  the  bottom  of  the 
organization  and  to  make  strategy  every¬ 
one’s  job,”  he  says. 

Susan  Dallas,  research  director  at  Gartner 
in  Stamford,  Conn.,  says  the  best  way  to  tell 


-BILL  SCHIEMANN,  CEO  OF  METRUS  GROUP 

if  the  Balanced.  Scorecard  is  working  for 
your  company  is  if  you  set  higher  measure¬ 
ment  goals  every  year  and  continue  to  meet 
them.  Obviously,  it  takes  time  to  make  this 
type  of  assessment.  In  the  short  term,  how¬ 
ever,  you  should  be  able  to  see  anecdotal  evi¬ 


dence  that  the  approach  is  working,  such  as 
whether  or  not  the  organization  is  meeting 
budgetary  and  project  goals. 

Bob  Sheridan,  head  of  market  support 
systems  at  Hartford,  Conn.-based  health 
insurer  Aetna,  says  you  know  it’s  working 
if  after  you  ask  people  what  they  do,  they 
define  their  job  in  the  perspective  of  where 
it  fits  in  with  the  strategic  business  goals  of 
the  organization,  rather  than  simply  saying, 
“I  write  code.” 

Finally,  says  DuPont’s  Bankston,  you 
should  see  vastly  improved  alignment 
between  business  and  IT.  “We’re  now  see¬ 
ing  real  joint  decision  making  around  what 
we  do  or  don’t  do  because  of  how  it  fits  in 
around  the  work  of  the  Scorecard.”  HH 


Do  you  use  the  Balanced  Scorecard  in  your  IT 
organization?  Send  your  comments  to  CIO  IT  Value 
Editor  Late  Low  at  llow@cio.com.  Eric  Berkman  is 
a  former  senior  writer  with  CIO. 


“  If  you  pick  things  you’ve  measured 
before  and  expect  different  results, 
you’ll  be  sadly  disappointed.” 
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Justifying  technology  investments  in  today's  economy  is  an  uphill  battle.  How  can  you  concentrate  on  core  business  matters  such 
as  productivity  and  profitability,  and  still  have  time  to  manage  day-to-day  demands?  Fortunately,  there  is  a  company  that  will 
help  you  deliver  on  all  fronts.  Whether  you  need  complete  project  oversight,  managed  services  or  IT  support  staff.  Proven  IT 
value  realization  methodologies  and  ROI  metrics  that  ensure  quantifiable  results,  effective  project  governance  and  quality 
assurance.  Who  is  this  company?  It’s  the  one  Fortune  1000  companies  have  turned  to  for  the  past  30  years  for  proven 
technology  solutions.  For  more  information,  call  800-SPHERION  or  visit  www.spheriontechnology.com. 
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Storage  is  already  as  big  as  an  elephant  and  getting  bigger.  It’s  time  for 
Cl  Os  to  stop  ignoring  it  and  start  dealing  with  it.  by  carol  Hildebrand 


Time  was,  a  company’s  storage  strategy  consisted  of  cutting  a  yearly  check  to  EMC,  Hitachi 
or  IBM  and  taking  delivery  of  storage  hardware  that  then  got  shackled  to  the  corporate 
servers.  It  was  simple  and  predictable. 

But  that  was  before  companies  faced  the  need  to  double  their  storage  capacity  every  six 
to  12  months.  That  was  before  Sept.  11  cast  the  need  for  reliable  data  backup  into  high 
relief,  and  before  companies  realized  that  they  needed  to  interconnect  isolated  pools  of  stor¬ 
age  in  order  to  maximize  ROI  from  expensive  ERP,  CRM  and  e-business  systems.  Before 
the  worldwide  storage  capacity  swells  from  283,000  terabytes  in  2000  to  more  than  5  million 
terabytes  by  2005,  as  Adam  Couture,  an  analyst  at  Gartner  in  Stamford,  Conn.,  predicts. 

Once  an  oxymoron,  storage  strategy  is  starting  to  get  the  attention  it  deserves,  driven  in 
part  by  cost.  C/O’ s  exclusive  survey  “Managing  Storage”  (conducted  in  February  2002) 
found  that  on  average  22  percent  of  a  company’s  total  IT  budget  will  be  allocated  to  stor¬ 
age  this  year  (some  analysts  estimate  that  the  budget  bite  can  go  as  high  as  50  percent). 


Reader  ROI 

►  Learn  about  the  rise  of 
the  IP-based  storage 
network 

►  Find  out  about  the 
new  technologies  such 
as  storage  resource 
management  and 
virtualization 

►  Discover  why  you  can’t 
have  all  of  this  work 
seamlessly  tomorrow 
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68%  of  respondents  reported  that  storage  needs  increased 
between  11%  and  50%  in  the  past  year.  _ 
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More  than  half  of  the  survey  respondents  said  that  senior  manage¬ 
ment  is  paying  more  attention  to  storage  now.  With  that  kind  of 
scrutiny,  smart  CIOs  will  have  to  figure  out  how  to  cheaply  and  effec¬ 
tively  manage  their  portion  of  that  5  million  terabyte  elephant. 

The  good  news  is  that  the  exponential  growth  in  data  has  led  to 
a  corresponding  surge  in  technologies  and  tactics  that  will  eventu¬ 
ally  help  CIOs  manage  storage  across  the  entire  company.  The  bad 
news  is  that  that  array  of  choices  has  transformed  storage  manage¬ 
ment  into  an  increasingly  complex  topic.  So  this  is  a  good  time  to 
take  stock  of  where  you  are — and  begin  developing  the  strategies  that 
can  help  you  get  to  where  you  want  to  be  in  the  future. 

Who  Brought  That  Elephant  in  Here? 

“[Storage  strategy]  is  just  starting  to  hit  CIOs’  radar  screens,”  says 
Mark  Shirman,  CEO  and  president  of  Glasshouse  Technologies,  a 
storage  consultancy  in  Framingham,  Mass.  “We’ve  probably  talked 
to  50  or  so  CIOs  in  the  past  six  months,  and  we  get  one  of  two  reac¬ 
tions.  One  is,  ‘Yes,  storage  is  a  huge  cost,  and  we’re  just  starting  to 
take  a  look  at  how  to  better  manage  it.’  The  other  one  is,  ‘Huh?’” 


Harry  Roberts  falls  into  the  first  camp.  “We’re  taking  the  first 
steps  in  managing  storage  as  an  entity — we’re  just  putting  together 
a  five-year  plan  for  storage,  for  example,”  say  Roberts,  vice  president 
and  CIO  of  Boscov’s  Department  Stores,  a  $1  billion  retailer  based 
in  Reading,  Pa.  Roberts,  who  predicts  that  his  storage  needs  will 
grow  by  50  percent  every  year,  has  reexamined  his  disaster  recovery 
plan  and  is  evaluating  technologies  that  will  help  him  manage  storage 
growth  without  having  to  expand  his  staff.  “We’re  talking  terabytes 
of  data,  and  that’s  a  huge  amount  of  stuff  to  take  care  of.  So  we  really 
have  to  start  thinking  about  it,”  he  says. 

Applications  such  as  CRM  and  ERP  create  huge  amounts  of  data. 
Moreover,  the  data  generated  by  these  enterprise  applications  is  likely 
to  be  in  demand  all  over  the  company  so  that  marketing,  sales  and 
service  reps  can  respond  to  customer  buying  habits  and  sales  trends. 

Trouble  is,  many  data  caches  reside  on  direct  attached  storage 
(DAS),  which  can’t  share  data — or  capacity — between  different 
servers,  let  alone  across  a  company.  Not  only  does  DAS  make  it  dif¬ 
ficult  to  satisfy  user  demands,  but  IT  executives  are  forced  to  buy 
more  storage — and  hire  more  people  to  administer  the  system — even 


The  Sharing  Environment  The  basics  of  storage  networks 


NETWORK  ATTACHED  STORAGE  (NAS) 
generally  refers  to  storage  devices  that 
can  be  attached  to  the  existing  corporate 
network,  making  NAS  pretty  cheap  to 
implement.  But  corporate  networks 
usually  run  according  to  Internet  protocol, 
which  sends  data  willy-nilly  or  in  a 
structure  known  as  file  format  (e-mail  and 
Word  documents  are  examples  of  file 
format).  But  storage  data  is  generally  sent 
in  block  format,  which  requires  that  the 
data  be  sent  in  a  certain  order.  Storage 
data  does  not  generally  take  kindly  to 
being  sent  in  file  format.  And  sending 
storage  data  over  the  company  network 
can  seriously  slow  network  speeds. 

INTERNET  PROTOCOL  (IP)  storage  is  a 
transport  mechanism  that  seeks  to  solve 


the  aforementioned  problem  of  sending 
block  data  over  a  regular  network.  Using 
IP  technology  to  transfer  storage  data  in 
the  block  format  it  prefers,  IP  storage  can 
save  money  by  allowing  a  company  to  use 
its  existing  network  Infrastructure  for 
storage— but  it  also  raises  the  same 
performance  issues  as  NAS. 

STORAGE  AREA  NETWORK  (SAN) 
bypasses  sending  data  over  regular 
networks  by  building  a  separate  network 
just  for  storage  devices,  servers,  backup 
systems  and  so  forth,  and  then  connect¬ 
ing  the  SAN  to  the  regular  network.  SANs 
may  be  based  on  an  industrial-strength 
connector  such  as  fibre  channel,  which 
can  handle  the  heavy  bandwidth 
demands  of  storage  data.  Keeping 


storage  data  off  regular  corporate  net¬ 
works  does  lighten  the  traffic  load,  but 
SANs  are  both  expensive  and  compli¬ 
cated  to  construct. 

STORAGE  VIRTUALIZATION  SOFTWARE 
cajoles  different  storage  devices  to 
interoperate  despite  the  fact  that  the 
various  operating  systems  manage 
storage  differently,  are  set  up  according 
to  each  maker's  technical  protocol  and 
cannot  communicate  with  each  other. 

Storage  virtualization  schemes  create  a 

<* 

separate  layer  of  software  that  acts  as  a 
universal  translator.  For  example,  you  can 
have  a  pool  of  storage  from  Compaq  and 
a  pool  of  storage  from  EMC,  and  you’ll  be 
able  to  move  data  back  and  forth 
between  the  two.  -C.H. 
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though  there  is  still  unfilled  capacity  in  their  data  center.  “[That] 
costs  a  lot  of  money,”  says  George  Medairy,  director  of  corporate  IT 
at  Sheetz,  a  $2  billion  convenience  store  company  based  in  Altoona, 
Pa.  “We  have  hundreds  of  thousands  of  dollars  invested  in  various 
aspects  of  storage.” 

Enter  the  storage  network,  which  evolved  in  answer  to  the  DAS 
problem.  By  pulling  storage  devices  onto  a  network,  companies  can 
theoretically  get  rid  of  the  interconnectivity  problem  and  manage 
capacity  better.  Jerry  McElhatton,  president  of  global  technology  and 
operations  at  MasterCard  International  in 
Purchase,  N.Y.,  has  put  together  a  central¬ 
ized  storage  center  with  several  storage 
area  networks  that  run  130  terabytes  of 
storage.  He  says  that  even  though  the  com¬ 
pany’s  applications  have  grown  hugely, 

“we’re  able  to  add  more  storage  without 
adding  more  people  to  maintain  it.  The 
cost  per  byte  of  storage  is  actually  less  than 
before  we  put  this  in.” 

McElhatton’s  solution  makes  a  lot  of 
sense.  But  storage  networks — be  they  stor¬ 
age  area  networks  (SANs),  network 
attached  storage  (NAS)  or  some  derivation 
of  Internet  protocol  storage — add  wrinkles 
of  their  own  to  the  challenge  of  managing 
storage.  For  example,  a  DAS  scheme  gen¬ 
erally  means  dealing  with  one  or  two  ven¬ 
dors.  In  contrast,  Glasshouse’s  Shirman 
says,  the  average  SAN,  which  requires 
software  and  networking  technology  as 
well  as  the  storage  hardware,  can  use 
products  from  five  to  seven  vendors. 

As  a  result,  IS  departments  need  more 
software  and  services  in  order  to  manage 
the  networks,  allocate  storage  capacity 
and  get  various  vendors’  products  to 
work  together.  In  fact,  some  analysts  are 
saying  that  the  budget  that  used  to  go  to 
hardware  is  merely  moving  over  to 
accommodate  the  increased  need  for  serv¬ 
ices  and  software.  Storage  hardware  ven¬ 
dors  such  as  EMC  are  reading  the  tea 
leaves  the  same  way  and  branching  out 
into  software  and  services  in  an  effort  to 
retain  market  share. 

Still,  for  most  companies  it’s  not  a  ques¬ 
tion  of  whether  they’ll  move  to  networked 
storage,  but  when.  “You  have  to  go  there,” 
says  Sheetz’s  Medairy  about  the  network, 

“because  users  want  to  get  at  that  data.  But 


it  really  changes  how  you  manage  storage.”  For  one  thing,  it’s  much 
more  difficult  to  maintain  a  storage  network  without  disrupting  the 
users.  “Now  that  we  have  more  applications  throughout  more  busi¬ 
ness  units  storing  data  on  different  servers  on  the  network,  timing  be¬ 
comes  harder  to  deal  with,”  he  says.  “It’s  not  a  matter  of  just  kicking 
a  few  users  off  the  system  any  more.  This  affects  lots  more  people.” 

A  Tmiikload  of  Options  on  the  Horizon 

For  CIOs  who  are  just  beginning  to  evaluate  storage  with  an  eye  to 

drawing  up  a  unified  plan  for  the  future, 
some  tantalizing  new  developments  are  on 
the  horizon.  However,  they  come  with  a 
couple  of  caveats.  Not  all  the  tools  are  in 
place  yet.  And  standards  squabbles 
between  hardware  vendors  are  stalling 
important  interconnectivity  projects. 
Here’s  the  thing:  Users  want  them. 
Vendors  don’t. 

“We’d  like  to  be  able  to  mix  and  match 
hardware  vendors’  solutions,”  says 
Dwight  Tart,  director  of  technical  serv¬ 
ices  for  International  Paper  at  its 
Memphis,  Tenn.,  operational  headquar¬ 
ters.  However,  he  isn’t  holding  his  breath. 
Even  though  common  information  model 
(CIM),  a  storage  management  standard, 
is  being  developed  by  the  Storage 
Networking  Industry  Association,  a 
standards-making  body,  standards  have 
become  a  struggle  for  supremacy  by  ven¬ 
dors’  technology  strategies.  Whoever  con¬ 
trols  the  interface,  rules. 

In  the  meantime,  there  are  three  tech¬ 
nologies  to  keep  an  eye  on. 

Storage  resource  management  (SRM) 
tools,  currently  available  in  early  rollouts, 
keep  a  bird’s-eye  view  of  storage  capacity 
on  the  network  and  allocate  more  capac¬ 
ity  as  needed.  If  the  SRM  software  sees 
that  more  storage  is  needed  by  the  CRM 
applications,  it  will  locate  and  re-allocate 
some  unused  capacity. 

Storage  network  management  (SNM) 
tools  create  a  map  of  all  the  devices  on  the 
storage  network  and  monitor  for  errors, 
such  as  network  or  server  failure,  auto¬ 
mating  a  manual  process. 

Storage  virtualization  software  acts  as 
the  Adobe  Postscript  for  storage — it  fools 
a  variety  of  proprietary  devices  into 
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Where  Does 

the  Money  Go? 


Along  with  the  rise  in  the  need  for  storage 
goes  an  increase  in  storage  spending. 

What  percentage  of  your  IT  budget  goes 
to  storage? 

m  17%  In  2001 

OH  22%  In  2002 


The  Rise  of 
Network  Storage 


Enterprise  applications  generate  huge 
amounts  of  data  that  need  extra  storage. 

What’s  driving  your  increased  demand 
for  storage? 

31%  Internet  applications 

32%  CRM 

I  33%  ERP 

m  44%  Business  process  backup 


Although  DAS  remains  popular,  close 
to  half  of  respondents  listed  SANs  as  the 
next  storage  solution  they’d  implement. 
What’s  your  primary  storage  technology? 

M 14%  Network  attached  storage  or  NAS 

WBt  24%  Storage  area  networks  or  SANs 

■■■■  53%  Direct  attached  storage  or  DAS 


Respondents:  100  CIOs  arid  IT  executives.  The 
"Managing  Storage"  exclusive  CIO  survey  was 
administered  online  during  February  2002.  For  the 
full  survey,  go  to  www2.cio.com/research. 
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This  is  the  CUSTOMER 

That  accessed  the  Account 

That  linked  with  the  Database 

That  verified  the  Deposit 

That  released  the  Funds 

That  paid  the  Loan 

That  updated  the  Records 

That  triggered  the  Statement 

That  completed  the  Process 

That  lives  in  the  Business  Integration  Software 

That  we  built  Together. 
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CrossWorlds  has  joined  with  IBM  to  provide 
comprehensive  business  integration  from  your 
first  step  to  the  finish.  Our  technology  powers  WebSphere®  to  not  only 
just  connect  your  business  —  but  make  all  your  processes  work 
together.  For  the  whole  story,  visit  ibm.com/websphere/crossworlds 
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IT’S  A  DIFFERENT  KIND  of  WORLD. 

YOU  NEED  A  DIFFERENT  KIND  of  SOFTWARE. 
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Ways  to  Take  Control 
of  Storage 

And  why  you  should  do  each  of  them 

1  INVENTORY  AND  CLASSIFY  DATA 

You  never  know  what  you  can  get  rid  of 

Jerry  McElhatton,  president  of  global  technology  and  opera¬ 
tions  at  MasterCard  International  in  Purchase,  N.Y.,  was  able  to 
unearth  and  remove  redundant  pieces  of  data,  thus  freeing  up 
storage  capacity.  “When  you  grow  storage  on  an  application 
rather  than  companywide  basis,  you  end  up  with  databases  with 
a  lot  of  the  same  content  on  them,”  says  McElhatton.  A  data 
inventory  will  flush  out  the  redundant  content,  and  “then  you 
can  put  it  into  a  single  file  and  let  that  one  data  component 
serve  all  the  people  who  need  it,”  he  adds. 

2  TRY  NEW  MANAGEMENT  TOOLS 

You  never  know  what  you'll  find 

George  Medairy,  director  of  corporate  IT  at  Sheetz,  a  conven¬ 
ience  store  company  based  in  Altoona,  Pa.,  discovered  a 
Computer  Associates  product  called  Brightstor  “bundled  in 
with  stuff  we  already  had.”  He’s  found  it  very  useful  in  automat¬ 
ing  certain  data  management  tasks  such  as  monitoring  storage 
tapes.  “It’s  really  helped  us,  and  we  didn’t  have  to  go  looking  for 
a  product  to  do  this  job,”  he  says. 

3  EVALUATE  DATA  BACKUP  AND  BUSINESS 
CONTINUITY  NEEDS 

You  never  know  what  you’ll  discover 

Bill  Gearhart,  director  of  IT  at  Rinker  Materials,  a  construction 
materials  manufacturer  in  West  Palm  Beach,  Fla.,  with  annual 
revenue  of  more  than  $2  billion,  recently  redid  his  disaster 
recovery  plan  and  discovered  that  he  was  neglecting  some 
important  data.  Bringing  e-mail  up  wasn’t  a  huge  priority  with 
the  old  plan.  But  since  many  people  need  the  system  for 
communication— and  for  storing  business-critical  information— 
Gearhart  says  that  e-mail  recovery  has  vaulted  to  the  top  of  his 
company’s  disaster  recovery  list.  -C.H. 


On  average,  approximately 
27%  of  storage  capacity  is 
underutilized.  _ 


robust  enough  for  MasterCard  to  implement  it  in  the  next  year  or 
so,  whereas  the  storage  virtualization  technology,  while  intriguing,  is 
not  quite  ready  for  prime  time.  “Getting  a  tool  for  storage  virtual¬ 
ization  is  a  little  further  out.  The  companies  are  newer,  and  it’s  a  tricky 
technology,”  he  says. 

Tart  has  recently  started  using  Computer  Associates’  SRM  soft¬ 
ware  in  an  effort  to  better  manage  storage  capacity  on  his  SANs. 
He  says  that  although  he’s  “very  early”  in  implementation,  his  staff 
has  already  identified  3  terabytes  of  unused  storage  hiding  out  in 
the  company’s  50-odd  terabytes  of  storage.  “We’re  going  to  have  to 
continually  better  manage  our  networked  capacity,  and  that’s  going 
to  require  more  than  just  manpower,”  he  says.  “We’ll  need  auto¬ 
mated  tools  to  get  it  done.” 

The  (Future)  Lord  of  the  Storage  Jungle 

How  will  the  CIO  know  when  the  storage  jungle  has  been  mas¬ 
tered?  Duplessie  thinks  the  future  will  look  a  lot  like  this:  IT  will  be 
able  to  analyze  storage  usage  at  a  granular  level,  accounting  for  stor¬ 
age  needs  by  department  or  line  of  business.  “Today,  we  can’t  delin¬ 
eate  between  storing  Steve  the  Moron’s  goofy  .mpeg  download  and 
an  Oracle  database  transaction,”  says  Duplessie. 

In  addition,  IS  departments  will  become  storage  service  providers. 
As  companies  begin  to  stratify  data  by  quality  and  apportion  stor¬ 
age  accordingly,  CIOs  will  be  able  to  work  out  quality  and  service 
agreements  with  each  depart¬ 
ment.  That  will  allow  the  CIO  to 
attach  a  monetary  value  to  stor- 

storage 

transgressors. 

The  big  goal  for  companies  is 
to  formulate  and  automate  stor¬ 
age  policies.  According  to  Duplessie,  policy  is  a  hot  term  these  days. 
The  idea  is  to  create  a  corporate  template  of  policies  and  procedures 
about  storage  and  commit  them  to  a  rules  engine  that  will  then  mon¬ 
itor  storage  and  enforce  the  rules.  Such  rules  can  stratify  different  lev¬ 
els  of  users  and  assign  certain  levels  of  access  to  storage,  as  well  as 
backup  schedules  and  data  retention  periods.  Storage  policies  will 
also  help  get  rid  of  data  that’s  just  wasting  space,  says  Duplessie. 
They’ll  even  weed  out  the  redundant  data  storage  practices  and  make 
them,  one  might  say,  tomorrow’s  white  elephant.  HE! 


Send  your  storage  rants  to  letters@cio.com.  Caro!  Hildebrand  is  a  former 
senior  editor  at  CIO. 


age  services  and  identify 


Find  the  MANAGING 
STORAGE  SURVEY  at 

www2.cio.com/research. 
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Informal  groups  known  as  communities  of  practice 
are  the  latest  technique  for  getting  employees  to  share 
what  they  know.  Here  are  seven  ways  to  encourage 
such  vibrant  communities  in  your  company. 


Excerpted  with  permission  of 
Harvard  Business  School  Press. 
Cultivating  Communities  of 
Practice:  A  Guide  to  Managing 
Knowledge  by  Etienne  Wenger, 
Richard  McDermott  and  William 
M.  Snyder.  Copyright  2002 
Etienne  C.  Wenger,  Richard 
McDermott  and  William  M. 
Snyder.  All  rights  reserved. 


BY  ETIENNE  WENGER,  RICHARD  MCDERMOTT 
AND  WILLIAM  M.  SNYDER 


In  Silicon  Valley,  a  community  of  circuit  designers 

meets  for  a  lively  debate  about  the  merits  of  two  different  designs 
developed  by  one  of  the  participants.  Huddling  together  over  the 
circuit  diagrams,  they  analyze  possible  faults,  discuss  issues  of  effi¬ 
ciency,  propose  alternatives,  tease  out  each  other’s  assumptions  and 
make  the  case  for  their  view.  Their  energy  is  palpable  to  both  the 
regular  participants  and  visitors.  Although  many  factors,  such  as 
management  support  or  an  urgent  problem,  can  inspire  a  commu¬ 
nity,  nothing  can  substitute  for  this  sense  of  aliveness. 

How  do  you  design  for  aliveness?  It  is  different  from  most  orga¬ 
nizational  design,  which  traditionally  focuses  on  creating  structures, 
systems  and  roles  that  achieve  relatively  fixed  organizational  goals 
and  fit  well  with  other  structural  elements  of  the  organization.  The 
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goal  of  designing  for  aliveness  is  to  bring 
out  the  community’s  own  internal  direction, 
character  and  energy. 

What  is  the  role  of  design  for  a  “human 
institution”  that  is,  by  definition,  natural, 
spontaneous  and  self-directed?.  How  do  you 
guide  such  an  institution  to  realize  itself,  to 
become  alive?  From  our  experience  we  have 
derived  seven  principles. 

1  Design 
for 

Evolution 

Because  communities  of  practice  are  organic, 
designing  them  is  more  a  matter  of  shep¬ 
herding  their  evolution  than  creating  them 
from  scratch.  As  the  community  grows,  new 
members  bring  new  interests  and  may  pull 
the  focus  of  the  community  in  different  direc¬ 
tions.  Changes  in  the  organization  influence 
the  relative  importance  of  the  community 
and  place  new  demands  on  it.  For  example, 
an  IT  community  that  was  only  marginally 
important  to  an  organization  suddenly 
became  critical  as  the  company  discovered 
the  potential  of  a  few  e-business  pilots. 

Community  design  often  involves  fewer 
elements  at  the  beginning  than  does  a  tra¬ 
ditional  organization  design.  In  one  case, 
the  coordinator  and  core  members  had 
many  ideas  of  what  the  community  could 
become.  Rather  than  introduce  those  ideas 
to  the  community  as  a  whole,  they  started 
with  a  very  simple  structure  of  regular 
weekly  meetings.  They  did  not  capture 
meeting  notes,  put  up  a  website  or  specu¬ 
late  with  the  group  on  “where  this  is 
going.”  Their  first  goal  was  to  draw  po¬ 
tential  members  to  the  community.  Once 
people  were  engaged  in  the  topic  and  had 
begun  to  build  relationships,  the  core  mem¬ 
bers  began  introducing  other  elements  of 
community  structure  one  at  a  time. 

Physical  structures — such  as  roads  and 
parks — can  precipitate  the  development  of 
a  town.  Similarly,  social  and  organizational 
structures,  such  as  a  community  coordinator 
or  problem-solving  meetings,  can  precipi¬ 
tate  the  evolution  of  a  community. 


2  Open  a  Dialogue 
Between  Inside 
and  Outside 

Effective  community  design  is  built  on  the 
collective  experience  of  community  mem¬ 
bers.  Only  an  insider  can  appreciate  the 
issues  at  the  heart  of  the  domain,  the  knowl¬ 
edge  that  is  important  to  share,  the  chal¬ 
lenges  his  field  faces,  and  the  latent  poten¬ 
tial  in  emerging  ideas  and  techniques.  Only 
an  insider  can  know  who  the  real  players  are 
and  their  relationships.  Good  community 
design  requires  an  understanding  of  the  com¬ 
munity’s  potential  to  develop  and  steward 
knowledge,  but  it  often  takes  an  outside  per¬ 
spective  to  help  members  see  the  possibili¬ 
ties.  It  might  mean  bringing  an  “outsider” 
into  a  dialogue  with  the  community  leader 
and  core  members  as  they  design  the  com- 

Good  community 
design  requires  an 
understanding  of  the 
community’s  potential 
to  develop  and  steward 
knowledge,  but  it 
often  takes  an  outside 
perspective  to  help 
members  see  the 
possibilities. 

munity  in  order  for  them  to  see  new  possi¬ 
bilities  and  effectively  act  as  agents  of  change. 

The  well-connected  leader  of  a  new  com¬ 
munity  on  emerging  technology  was  con¬ 
cerned  about  how  to  develop  the  commu¬ 
nity  when  many  of  the  prima  donnas  of  the 
industry  were  outside  his  company.  When  he 
saw  how  a  similar  community  in  another 
organization  was  structured  to  involve  out¬ 
side  experts  in  multiple  ways,  he  started 
rethinking  the  potential  structure  of  his  own 


community.  He  realized  that  the  key  issues 
in  his  community  were  less  about  technol¬ 
ogy  and  more  about  the  business  issues 
involved  in  developing  the  technology.  This 
understanding  of  the  business  perspective  of 
the  other  community  gave  him  a  sharper 
sense  of  the  strategic  potential  of  his  own. 

3  Invite  Different 
Levels  of 
Participation 

People  participate  in  communities  for  dif¬ 
ferent  reasons.  We  commonly  see  three  main 
levels  of  community  participation.  The  first 
is  a  small  core  group  of  people  who  actively 
participate  in  discussions.  As  the  community 
matures,  this  core  group  takes  on  much  of 
the  community’s  leadership.  But  this  group 
is  usually  rather  small,  only  10  percent  to 
15  percent  of  the  whole  community. 

At  the  next  level  outside  this  core  is  the 
active  group.  These  members  attend  meet¬ 
ings  regularly  and  participate  occasionally 
in  the  community  forums,  but  without  the 
regularity  or  intensity  of  the  core  group.  The 
active  group  is  also  quite  small,  another 
15  percent  to  20  percent  of  the  community. 

A  large  portion  of  community  members 
are  peripheral  and  rarely  participate.  In¬ 
stead,  they  keep  to  the  sidelines,  watching 
the  interaction  of  the  core  and  active  mem¬ 
bers.  In  a  traditional  meeting  or  team,  we 
would  discourage  such  halfhearted  involve¬ 
ment,  but  these  peripheral  activities  are  an 
essential  dimension  of  communities  of  prac¬ 
tice.  Indeed,  the  people  on  the  sidelines  often 
are  not  as  passive  as  they  seem;  they  gain 
their  own  insights  from  the  discussions  and 
put  them  to  good  use. 

Finally,  outside  those  three  main  levels  are 
people  surrounding  the  community  who  are 
not  members  but  who  have  an  interest  in  the 
community,  including  customers,  suppliers 
and  “intellectual  neighbors.” 

The  key  to  good  community  participa¬ 
tion,  and  a  healthy  degree  of  movement 
between  levels,  is  to  design  community 
activities  that  allow  participants  at  all  lev¬ 
els  to  feel  like  full  members.  Rather  than 
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force  participation,  they  make  opportuni¬ 
ties  for  semiprivate  interaction,  whether 
through  private  discussion  rooms  on  the 
community’s  website,  at  a  community  event 
or  in  a  one-on-one  conversation. 

4  Develop 
Public  and 
Private  Spaces 

Public  community  events  serve  a  ritualistic 
as  well  as  a  substantive  purpose.  Through 
such  events,  people  can  tangibly  experience 
being  part  of  the  community  and  see  who 
else  participates. 

However,  communities  are  much  more 
than  their  calendar  of  events.  The  heart  of 
a  community  is  the  web  of  relationships 


among  community  members,  and  much 
occurs  in  one-on-one  exchanges.  Thus,  a 
common  mistake  in  community  design  is  to 
focus  too  much  on  public  events.  Every 
phone  call,  e-mail  exchange  or  problem¬ 
solving  conversation  strengthens  the  rela¬ 
tionships  within  the  community. 

When  the  individual  relationships  among 
community  members  are  strong,  the  events 
are  much  richer.  Because  participants  know 
each  other  well,  they  often  come  to  commu¬ 
nity  events  with  multiple  agendas:  completing 
a  small  group  task,  thanking  someone  for  an 
idea,  finding  someone  to  help  with  a  problem. 
In  fact,  good  community  events  usually  allow 
time  for  people  to  network  informally. 

Focus 
on 

Value 

Value  is  key  to  community  life  because  par¬ 
ticipation  in  most  communities  is  voluntary. 
But  the  full  value  of  a  community  is  often 
not  apparent  when  it  is  first  formed.  More¬ 
over,  the  source  of  value  often  changes  dur¬ 


ing  the  life  of  the  community. 

Communities  need  to  create  events,  activ¬ 
ities  and  relationships  that  help  their  poten¬ 
tial  value  emerge  and  enable  them  to  dis¬ 
cover  new  ways  to  harvest  it — rather  than 
attempting  to  determine  their  expected  value 
in  advance. 

Several  months  after  one  community 
started,  it  made  discussing  value  part  of  its 
monthly  teleconferences.  Most  community 
members  were  not  able  to  identify  any  par¬ 
ticular  value  when  these  discussions  began, 
even  though  they  all  felt  participation  was 
useful.  Soon,  however,  one  community 
member  was  able  to  quantify  the  value  his 
team  gained  by  applying  a  new  technique 
he  learned  from  a  fellow  member.  Another 
said  the  real  value  of  the  community  was 


more  personal  and  less  quantifiable;  he 
knew  whom  he  could  contact  when  he  had  a 
problem. 

6  Combine 

Familiarity  and 
Excitement 

Community  members  can  offer  advice  on  a 
project  with  no  risk  of  getting  entangled  in 
it;  they  can  listen  to  advice  with  no  obliga¬ 
tion  to  take  it.  Those  are  reasons  scientists 
in  a  pharmaceutical  company,  driven  by 
urgency  to  develop  new  products,  see  their 
community  as  a  place  to  think  and  consider 
ideas  too  “soft”  for  the  development  teams. 

Vibrant  communities  also  supply  diver¬ 
gent  thinking  and  activity.  Conferences,  fairs 

cio.com _ 

Curious  about  how  a  community  of 
practice  can  come  alive?  For  the  next 
two  weeks,  go  online  to  ASK  THE 
AUTHORS.  Look  for  the  Web 
Connections  box  at  www.cio.com. 


and  workshops  such  as  these  bring  the  com¬ 
munity  together  in  a  special  way  and  thus 
facilitate  a  different  kind  of  spontaneous 
contact  between  people. 

Routine  activities  provide  the  stability  for 
relationship-building  connections;  exciting 
events  provide  a  sense  of  common  adventure. 

7  Create  a 
Rhythm  for 
the  Community 

Vibrant  communities  of  practice  also  have 
a  rhythm.  At  the  heart  of  a  community  is  a 
web  of  enduring  relationships  among  mem¬ 
bers,  but  the  tempo  of  their  interactions  is 
greatly  influenced  by  the  rhythm  of  com¬ 
munity  events. 

A  community  of  library  scientists  had  an 
annual  meeting  and  a  website  with  a 
threaded  discussion.  Not  surprisingly,  six 
months  after  the  conference  there  was  very 
little  activity  on  the  Web.  An  engineering 
community,  on  the  other  hand,  held  a 
biweekly  teleconference  as  well  as  several 
focused,  face-to-face  meetings  during  the 
year.  In  this  community  there  is  typically  a 
flurry  of  activity  on  the  website  just  before 
and  after  the  teleconferences  and  meetings. 

The  rhythm  of  the  community  is  the 
strongest  indicator  of  its  aliveness.  A  com¬ 
bination  of  whole-community  and  small- 
group  gatherings  creates  a  balance  between 
the  thrill  of  exposure  to  many  different  ideas 
and  the  comfort  of  more  intimate  relation¬ 
ships.  A  mix  of  idea-sharing  forums  and 
tool-building  projects  fosters  both  casual 
connections  and  directed  community  action. 

There  is  no  right  beat  for  all  communi¬ 
ties,  and  the  beat  is  likely  to  change  as  the 
community  evolves.  But  finding  the  right 
rhythm  at  each  stage  is  key  to  a  commu¬ 
nity’s  development.  BE] 

Etienne  Wenger  pioneered  "communities  of  prac¬ 
tice”  research  and  is  now  a  globally  recognized 
thought  leader  in  the  field.  Richard  McDermott  is 
president  of  McDermott  Consulting.  William  M. 
Snyder  consults  in  the  area  of  organization  devel¬ 
opment. 


The  rhythm  of  the  community  is  the 
strongest  indicator  of  its  vitality. 
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WHEN  TOM  HYATT  launched  the  production 
version  of  his  school’s  enterprise  portal  last  July, 
he  was  in  for  a  big  surprise.  Vice  president  of 
technology  for  the  Maryland  Institute  College 
of  Art  (MICA),  Hyatt  immediately  noticed  per¬ 


formance  problems  on  the  campuswide  portal. 
It  was  taking  forever  for  the  school’s  2,000  stu¬ 
dents,  faculty  and  staff  to  access  class  schedules, 
grades  and  course  materials  on  the  MyMICA 
portal.  Hyatt  was  mystified. 


Cool  keyboards. ..3-D  imaging. ..Wireless  supply  chain 
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Hyatt’s  bewilderment  gave  way  to  cha¬ 
grin  as  he  realized  that  the  portal  was  bog¬ 
ging  down  because  the  newly  returned 
students  were  downloading  MP3  music 
files  on  the  campus  network  in  their  dorm 
rooms.  But  faculty  members  didn’t  want 
to  hear  any  excuses.  And  some  were  con¬ 
vinced  that  the  portal  was  a  waste  of  time. 

“If  anything  goes  wrong  [with  a  por¬ 
tal],  people  lose  confidence  in  it,”  says 
Hyatt.  MICA  has  since  given  the  student 
dorms  dedicated  Internet  access.  The  por¬ 
tal  is  back  up  to  speed  and  winning  con¬ 
verts  every  day. 

But  as  Hyatt  can  attest,  when  it  comes 
to  enterprise  portals,  what  you  don’t 
know  can  hurt  you. 

Despite  the  pitfalls,  many  organiza¬ 
tions  are  building  such  portals.  These  data 
depots  are  an  excellent  way  to  disserni- 
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they  had  to  search  out  the  data  and  appli¬ 
cations  themselves. 

Once  you  decide  you  need  an  enter¬ 
prise  portal,  the  questions  begin.  First, 
what  audience  do  you  want  to  serve  and 
with  what  information?  Don’t  gloss  over 
this  “requirements  definition”  phase — 
most  of  your  other  decisions  will  flow 
from  here.  With  the  important  architec¬ 
ture  questions  out  of  the  way,  the  next 
question  is,  Which  vendor?  That  is  not  a 
straightforward  matter.  In  a  recent  IDC 
portal  survey,  only  8.3  percent  of  respon¬ 
dents  felt  they  had  detailed  knowledge  of 
portal  vendors  and  their  offerings. 

Not  the  Obvious  Choice 

Which  vendor  you  choose  depends  to  a 
large  degree  on  your  legacy  applications, 
which  constituencies  you’re  trying  to  serve 


With  portal  tools  reaching  maturity, 

.  potential  buyers  now  have  numerous 
enterprise-ready  options. 


nate  information  and  applications  from  a 
single  location  to  employees,  customers 
and  suppliers.  And  with  portal  tools 
reaching  maturity,  potential  buyers  now 
have  numerous,  enterprise-ready  options. 

Name  Game 

Enterprise  portal  isn’t  just  a  fancy  term  for 
intranet.  The  critical  difference  is  that  end 
users  can  customize  an  enterprise  portal — 
adding  and  subtracting  internal  and  exter¬ 
nal  information  sources  and  applications. 
In  theory,  customization  gives  employees 
all  the  information  they  need  to  do  their 
job  more  quickly  and  efficiently  than  if 
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(internal  or  external),  and  what  inforf 
mation  you’d  like  to  serve,  says  Laura 
Ramos,  research  director  for  Cambridge, 
Mass. -based  Giga  Information  Group. 
For  Hyatt,  that  decision  came  down  to  the 
fact  that  the  school  used  PeopleSoft’s 
human  resources,  student  administration 
and  financial  enterprise  applications. 
Those  existing  tools  made  the  selection  of 
PeopleSoft  for  his  portal  easier. 

PeopleSoft  offered  a  product  called 
Campus  Portal  specifically  targeted  at  the 
education  industry,  but  Flyatt  didn’t  take 
the  bait.  “It  had  capabilities  we  didn’t 
want.  It  linked  to  student  systems  in  a  way 
we  weren’t  ready  to  use,”  says  Hyatt. 

Hyatt’s  reticence  was  because  MICA, 
like  most  educational  institutions,  had 
already  built  a  campus  intranet  as  well  as 
an  external  website.  By  sticking  with 
PeopleSoft’s  more  generic  portal,  called 
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Mobile  Input 

NO  ONE  works  at  his  desk 
anymore,  or  so  it  would  seem. 
Jumping  on  the  trend,  Logitech 
has  announced  a  trio  of  new 
products  designed  to  make  data 
entry  easier  on  portable  devices. 

The  slim  MouseMan  Traveler 
($49.95)  hooks  to  any  Windows 
or  Mac  OS  8.6  (or  above)  system, 
and  provides  ball-free  mouse 
action  using  an  optical  sensor 
that  works  on  nearly  any  surface. 
It’s  designed  for  use  in  either 
hand  and  includes  a  protective 
carrying  case. 

The  Logitech  KeyCase  key¬ 
board  ($99.95)  acts  like  a  case 
but  works  like  a  keyboard  for  your 
Palm  PDA.  The  fabric-like  periph¬ 
eral  lets  you  enter  data  and  scroll 
through  screens  without  resorting 
to  using  your  stylus.  And  when 
you’re  done,  simply  roll  up  your 
PDA  in  the  key-cloth  and  you’re 
ready  to  go. 

If  you’d  rather  have  the  feel  of 
a  more  traditional  keyboard,  then 
check  out  Logitech’s  TypeAway 
folding  keyboard  ($79.95).  The 
thin,  lightweight  keyboard  folds  in 
half  for  easy  carrying  and  fea¬ 
tures  shortcut  keys  for  your 
favorite  programs.  Both  the 
KeyCase  and  the  TypeAway  are 

compatible  with  Palm's  m!25, 

* 

m500  and  m505  models. 

For  more  information,  visit 
www.  logitech.  com . 

-Christopher  Lindquist 
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Are  you  getting  the  most  from 


your  existing  resources? 


the  PeopleSoft  Enterprise  Portal,  connect¬ 
ing  the  information  sources  became  a 
simple  matter.  “The  PeopleSoft  Enterprise 
Portal  is  very  open-ended,  allowing  many 
different  kinds  of  content  to  be  plugged 
in,”  Hyatt  says. 

Making  Your  Own  Way 

When  Dick  Antalek  decided  to  craft  an 
enterprise  portal,  application  and  infor¬ 
mation  integration  was  a  huge  matter  for 
the  vice  president  and  CIO  of  Hyperion 
Solutions,  the  $500  million  enterprise  soft¬ 
ware  vendor  based  in  Sunnyvale,  Calif. 
Antalek  had  already  built  an  extensive 
intranet  called  GlobalSource  in  1996.  But 
by  last  year,  he  was  itching  to  create  an 


enterprise  portal  specifically  for  Hyperion’s 
sales  and  marketing  staff.  Because  the 
salespeople  had  limited  time  in  their  hotel 
rooms  at  night,  Antalek  wanted  to  spare 
them  the  hassles  of  switching  from  data¬ 
base  to  database,  application  to  applica¬ 
tion.  The  new  portal,  called  My  Global 
Source,  helps  harried  salespeople  “Get 
stuff  faster,”  as  its  tagline  says. 

Hyperion’s  enterprise  portal  is  built  on 
technology  from  Plumtree  Software,  Lotus 
Domino  and  Hyperion’s  own  portal  prod¬ 
uct:  Hyperion  Central.  “We  have  multi¬ 
ple  portal  vendors,”  says  Antalek.  “This 
is  the  way  of  the  future.” 

Antalek  elected  to  go  the  tough  route 
of  being  his  own  portal  integrator  because 
he  says  it  will  have  better  payback  than 
implementing  one  vendor’s  product.  “We 
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built  our  portal  to  be  very  specific  to  us,” 
says  Antalek.  Salespeople  save  on  aver¬ 
age  15  to  20  minutes  per  day  using  the 
portal  versus  the  old  information  access 
method.  This  may  not  sound  like  much, 
but  Antalek  disagrees.  “That’s  15  to  20 
minutes  per  day  they  can  use  contacting 
their  customers.  It’s  extra  time  to  do  things 
we  really  want  and  need  them  to  do.”  He 
admits,  however,  that  he  did  underesti¬ 
mate  the  integration  task. 

“We  thought  you  would  bring  up  the 
site,  throw  some  links  in,  and  you’re  off 
and  running.  But  the  business  commu¬ 
nity  has  to  make  more  decisions  than  we 
thought,”  he  says.  Helping  business  man¬ 
agers  think  through  information  taxon¬ 


omy  issues  (such  as  what  kind  of  infor¬ 
mation  and  in  what  format  would  be 
most  useful  for  the  staff)  was  more  of  a 
challenge  than  any  of  the  technical  work. 
Currently,  2,000  Hyperion  employees  use 
the  enterprise  portal,  and  Antalek  is  in 
the  process  of  adding  a  version  for  out¬ 
side  distributors.  And  that  external  portal 
has  some  new  issues — primarily  security- 
related. 

Since  the  distributors  will  be  privy  to 
only  a  subset  of  the  data  on  Hyperion’s 
portal,  Antalek’s  team  members  had  to 
install  another  firewall — inside  the  main 
corporate  firewall — to  isolate  the  data 
they  could  see  but  no  other  outsiders 
could  access.  This  “demilitarized  zone,” 
or  DMZ,  required  changes  to  the  net¬ 
work  and  the  document  management 
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infrastructure.  In  addition  to  buying 
extra  networking  equipment,  Antalek 
found  the  issue  of  giving  outsiders  portal 
access  to  some — but  not  all— -informa¬ 
tion  more  daunting  than  anticipated. 
“We  have  an  external  website,”  he  says. 
“We  thought  the  security  issues  would 
be  similar  to  that.  They’re  not.  We  had 
to  move  data  around  to  make  it  more 
isolated.” 

On  a  Grand  Scale 

When  $170  billion  auto  giant  Ford  Motor 
planned  an  upgrade  of  its  Hub.ford.com 
employee  website  in  January  2000,  the 
stakes  were  high.  With  an  internal  user 
community  of  more  than  50,000,  some 
1,500  major  websites  and  more  than 
1  million  documents  as  potential  content, 
the  company’s  My.ford.com  was  an  en¬ 
deavor  on  a  grand  scale.  When  it  came  to 
vendor  selection,  Trish  Buckley,  program 
manager  for  enterprise  portals,  and  the 
rest  of  the  team  put  each  of  the  four  final¬ 
ists  to  the  test. 

“We  invited  everyone  onsite  and  gave 
them  three  days  to  integrate  their  portal 
with  some  of  the  key  bits  of  functional¬ 
ity  that  we  would  need.  At  the  end  of 
three  days  we  wanted  to  see  a  working 
prototype  of  this  small  subset  of  func¬ 
tionality,”  says  Buckley.  In  particular,  the 
team  wanted  to  see  a  portal  that  could 
work  with  Ford’s  proprietary  single  sign- 
on  capability  as  well  as  Ford  stock  infor¬ 
mation  and  competitive  intelligence.  At 
the  end  of  three  days,  three  out  of  four 
vendors  had  a  prototype  up  and  running, 
with  varying  degrees  of  success. 

The  best  version  was  from  Plumtree, 
the  vendor  Ford  selected  shortly  thereafter. 
“Plumtree  was  the  leader  in  terms  of  its 
extendibility.  It  integrated  well  with  our 
other  applications  such  as  Documentum 
and  eRoom.  And  they  are  very  strong  on 
content  management,”  she  says. 

With  the  vendor  selection  out  of  the 
way,  it  took  the  team  about  a  year  to  fully 
launch  the  infrastructure,  the  target  com- 
I  munities  and  the  governance  policies. 


Which  portal  vendor  you  choose 
depends  to  a  large  degree  on  your  legacy 
applications,  which  constituencies  you’re 
trying  to  serve  (internal  or  external),  and 
what  information  you’d  like  to  serve. 

-Laura  Ramos,  research  director,  Giga  Information  Group 
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It's  about  perspective  At  Lockheed  Martin,  we  understand 


the  complex  interconnectivities  and  the  fragile  balance  between 
individuals  and  across  systems.  And  we’re  bringing  that  hard-earned 
knowledge  to  IT  outsourcing. 

Case  in  point :  The  U.S.  Chamber  of  Commerce,  the  world’s 
largest  non-profit  business  federation,  engaged  Lockheed  Martin 
to  upgrade  their  infrastructure  and  accelerate  system  implementation. 
The  resulting  collaboration  enabled  the  U.S.  Chamber  to,  not  only 
meet  their  financial  goals,  but  also  to  educate  their  staff  on  the  benefits 
of  using  IT  to  solve  business  problems. 

We  know  how  it  can  work.  Better,  faster,  stronger. 

Lockheed  Martin.  Continuing  to  bring  our  30-year  heritage  of  big 
picture  thinking  and  detailed  focus  to  IT. 


LOCKHEED  MAR 

INFORMATION  TECHNOLOGY 


www.it.lockheedmartin.com 
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Buckley  insisted  on  a  single  installation  of 
the  Plumtree  software  across  all  the  busi¬ 
ness  units,  an  early  decision  that  turned 
out  to  be  critical. 

“We  wanted  to  keep  the  number  of 
Plumtree  installations  to  a  minimum  so 
we  could  reap  the  benefit  of  business 
object  reuse.  If  each  organization  had  its 
own  installation,  it  would  be  a  nightmare 
to  manage,”  Buckley  says.  “And  it  would 
be  very  hard  in  terms  of  governance. 
We’re  looking  to  have  uniform  standards 
across  our  large  portal.” 

Buckley  believes  personalization  drives 
the  return  on  investment  for  so-called 
business-to-enterprise  portals.  She  reports 
that  45,000  employees  have  customized 
their  My.ford.com  page,  which  already 
beats  the  Gartner  industry  benchmark  of 
25  percent.  “The  more  we  can  provide  a 
better  set  of  tools,  the  more  the  personal¬ 
ization  will  increase,”  she  says. 

There  are  potholes  on  the  road  to  enter¬ 
prise  portals,  but  these  early  adopters 
agree  that  the  trip  has  been  worth  it. 
“When  we  show  people  how  we  can  put 
all  the  information — including  informa¬ 
tion  from  competitive  websites — in  one 
place  automatically,  they  get  very  inter¬ 
ested,”  says  Hyperion’s  Antalek.  “People 
hugged  me  the  day  after  we  put  it  up.” 

Beyond  the  extra  affection,  Hyperion’s 
portal  payoff  lies  in  soft  benefits  like 
increased  productivity  for  the  sales  staff 
and  harder  ones  such  as  reduced  mailing 
costs  for  distributor  materials.  Antalek’s 
team  did  not  put  together  a  formal  project 
justification,  if  only  because  the  invest¬ 
ment  required  to  move  from  the  preex¬ 
isting  intranet  to  an  enterprise  portal  was 
not  great.  “For  a  company  that  had  noth¬ 
ing  to  build  on,  the  justification  process 
might  have  been  different,”  Antalek  says. 
“It  was  pretty  clear  that  for  us,  it  was 
worth  it.”  ■ 

Lauren  Gibbons  Paul  is  a  freelance  writer 
in  Waban,  Mass.,  who  writes  frequently  on 
technology  and  business.  Send  her  e-mail  at 
laurenpaut@attbi.com. 
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Squeezing  3-D  Graphics 

HIGH-RESOLUTION  THREE-DIMENSIONAL  Web  graphics  let  you  view  images,  from 
product  prototypes  to  swimsuit  models,  in  intricate  detail  from  any  angle.  That  is  if 
you  can  stand  the  wait.  But  impatient  researchers  at  Bell  Labs  and  the  California 
Institute  of  Technology  have  found  a  way  to  transmit  complex  3-D  images  across 
the  Internet  at  speeds  up  to  a  dozen  tirhes  faster  than  conventional  methods. 

Traditional  3-D  technology  describes  objects  in  agonizingly  exact  detail,  using 
dense  meshes  of  millions  or  even  billions  of  individual  triangles.  To  reduce  file  sizes 
and  speed  transfers,  Peter  Schroder,  a  professor  of  computer  science  and  applied 
and  computational  mathematics  at  Caltech,  and  Wim  Sweldens,  director  of  of  algo¬ 
rithms  scientific  computing  research  at  Bell  Labs,  set  about  simplifying  3-D  image 
geometry.  They  did  this  by  stripping  the  amount  of  numbers  needed  to  describe  a 
particular  3-D  image  point  from  three  to  one. 

Simplifying  point  descriptions  cut  file  size  by  about  a  factor  of  three.  To  achieve 
additional  compression,  the  researchers  turned  to  wavelet  transformations 
(“wavelets”  are  a  mathematical  technique  complementary  to  Fourier  transforms— the 
formulas  that  lie  at  the  heart  of  digital  signal  processing).  The  researchers  already 
knew  that  wavelets  built  with  Fourier  techniques,  while  extremely  useful  for  compres¬ 
sion,  couldn’t  handle  the  geometry  of  curved  surfaces  very  well.  So  the  team  pio¬ 
neered  a  technique  of  generating  wavelets  without  using  Fourier  transforms. 

The  arrival  of  high-quality  3-D  images  could  revolutionize  the  way  people  use  the 
Internet.  “Imagine  being  able  to  download  a  3-D  model  of  a  home  you’re  thinking  of 
buying,"  says  Sweldens.  "Not  only  would  you  be  able  to  move  from  room  to  room, 
you  would  be  able  to  see  all  of  the  features  in  high  detail,  right  down  to  the  cracks  in 
the  wall.”  Today  only  users  with  high-bandwidth  connections  can  take  advantage  of 
such  visuals,  he  notes,  but  “in  a  few  years,  they  could  be  available  to  anyone." 

-John  Edwards 
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ILLUSTRATION  BY  BILL  SCHWARTZ 


IBM  LIFE  SCIENCES  AND  OUR  BUSINESS  PARTNERS  OFFER  SERVER  AND 
STORAGE  SOLUTIONS  TO  HELP  ACCELERATE  GENOMIC  AND  PROTEOMIC 
RESEARCH  AND  DRUG  DISCOVERY. 

IBM  (©server  Solutions.  Self-managing  technology  that  allows  multi-platform  accessibility  and 
the  flexibility  to  select,  build  and  deploy  a  range  of  applications. 

IBM  TotalStorage™  Products.  Cross-platform  compatibility,  superior  availability  and  the  flexibility 
to  meet  your  growing  storage  requirements. 

To  get  a  free  “Protein  Folding”  screensaver,  visit  ibm.com/solutions/lifesciences/servers6 
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PUNDITS 
Ram  Reddy 

Wireless  Does  Have  Real  ROI 

Despite  initial  disappointment,  wireless  tech  still  bolds 
significant  promise  for  bottom-line  impact  across  supply  chains 


SPECIAL-FUNCTION  wireless  devices 
have  the  potential  to  deconstruct  the 
desktop-centric  workflow  models  so  com¬ 
mon  in  companies  and  their  supporting 
supply  chains.  The  receiving  process  at  a 
warehouse,  for  example,  may  involve 
keying  bills  of  lading  into  a  desktop  PC 
before  the  material  moves  to  the  produc¬ 
tion  lines.  Similar  desktop  detours — and 
the  related  breaks  in  workflow — exist  in 
most  functions  within  companies.  These 
breaks  provide  an  opportunity  for  spe¬ 
cialized  wireless  devices  that  focus  on  nar¬ 
row  functions  with  limited  features. 
Companies  can  aim  such  devices  at  facil¬ 
itating  the  natural  flow  of  goods  and  serv¬ 
ices  within  a  company  and  its  supply 
chain — making  them  the  next  evolution¬ 
ary  wireless  trend. 

Unfortunately,  given  competing  WAP 
standards  and  general  flux  in  the  indus¬ 
try,  most  IT  executives  are  confused  when 
it  comes  to  acquiring  and  utilizing  the 
new  technologies.  Questions  abound.  Is 
Bluetooth  still  an  option?  What  about 
802.11b  protocol?  Will  the  Palm  OS 
become  a  de  facto  wireless  standard?  All 
of  those  uncertainties  muddy  the  waters. 

Rather  than  waiting  for  things  to  clear, 
however,  I  recommend  that  organizations 
make  decisions  regarding  wireless  tech¬ 
nology  devices  based  solely  on  the  cost- 
benefit  analysis,  without  worrying  about 
long-range,  enterprise-scale  planning. 
The  typical  special-purpose  wireless 
device  is  going  to  see  a  lot  of  wear  and 
tear  over  its  lifetime.  It  will  need  to  be 
replaced  periodically;  typical  cellular 
users  replace  their  phones  every 
1.2  years,  for  example.  During  these 


Upgrade  to 
new  standards 
when  replacing 
worn-out  devices. 

replacement  periods,  companies  can 
upgrade  to  the  latest  and  greatest  under¬ 
lying  wireless  technology. 

There  is  precedent  for  this  approach. 
Companies  that  have  successfully  utilized 
wireless  technologies  have  realized  imme¬ 
diate  reduction  in  cost  of  goods  as  well 
as  general  administrative  expenses.  And 
in  tough  economic  times,  those  are  the 
only  two  items  that  remain  under  a  com¬ 
pany’s  control.  Consider  the  example  of 
an  innovative  car  rental  company.  The 
parking  lot  attendant  cuts  cycle  time  by 


checking  in  the  car  and  printing  a  receipt 
with  a  wireless  device.  That  puts  a  smile 
on  the  customer’s  face,  as  she  hurries  to 
the  airport.  It  is  these  small  but  effective 
and  innovative  uses  that  wireless  tech¬ 
nologies  can  capitalize  on.  Moreover,  the 
company’s  existing  car-return  process 
receives  minimal  impact,  thus  improving 
the  chances  of  a  successful  technology 
implementation.  And  it  is  much  easier  to 
keep  the  scope  focused  when  dealing 
with  special-purpose  devices  with  limited 
functionality. 

The  biggest  challenge  to  cost-effec¬ 
tively  using  wireless  devices  within  a 
company  and  its  supply  chain  is  the  rel¬ 
atively  small  size  of  the  business  benefit. 
For  example,  the  business  benefits  in 
terms  of  productivity  gains,  cycle  time  or 
inventory  turnover  will  be  limited  in  com¬ 
parison  to  the  potential  benefits  from 
implementing  a  CRM,  ERP  or  SCM  pack¬ 
aged  application.  Moreover,  benefits 
from  these  devices  may  be  limited  to  a 
particular  function  within  a  department. 

This  relatively  small  savings  potential 
makes  specialized  wireless  applications 
unattractive  candidates  for  CIOs,  who 
tend  to  focus  on  the  enterprise  perspec¬ 
tive.  Yet  specialized  wireless  devices  can 
drive  out  inefficiencies  within  an  organi¬ 
zation  and  its  supply  chain  while  mini¬ 
mizing  implementation  risk.  Given  that, 
IT  executives  need  to  think  about  going 
for  base  hits  instead  of  home  runs.  We 
have  already  seen  the  general  disillusion¬ 
ment  with  the  IT  function  increasing  dur¬ 
ing  the  past  few  years.  It  may  be  time  to 
lower  our  sights  and  focus  on  technolo¬ 
gies  that  can  be  implemented  in  months, 
not  years,  and  can  demonstrate  an  imme¬ 
diate  return  on  investment.  HE] 


Ram  Reddy,  president  of  Tactica  Consulting 
Group  in  Troy,  Mich.,  is  coauthor  of  the  book 
Supply  Chains  to  Virtual  Integration  (McGraw- 
Hill  Professional,  2001),  which  deals  with  strat¬ 
egy  and  technology  implementation  issues  in 
more  detail.  He  can  be  reached  via  e-mail  at 
ramreddy@tacticagroup.com. 


124  CIO  MAY  IS,  2002  •  www.cio.com 


PHOTO  BY  DAVID  BADITOI 


REDUCE  STORAGE  TCO 


©2002  W.  Quinn  Inc. 


Control  Your  Storage  Resources 

Today's  Internet-enabled  organizations  consume  data  storage  like  water.  But  with  a  corporate  storage  usage 
policy  in  place,  you  control  the  flow  of  storage  expenditures.  StorageCentral®  SRM  monitors  and  enforces 
your  storage  usage  policy  so  you  can  reduce  your  storage  growth  rate  by  30%,  reclaim  up  to  half  of  your 
storage  space,  and  ensure  high  availability,  performance,  and  efficiency  of  your  storage  resources. 
Translation:  cost  control,  immediate  ROI,  and  reduced  total  cost  of  ownership  of  your  storage  resources. 


Find  out  how  over  4,000  companies  in  50  countries,  including  Microsoft  and  80  of  the  Fortune  100 
have  reduced  their  storage  TCO  with  the  award-winning  StorageCentral  SRM.  For  a  free  white  paper 
entitled  "Guidelines  for  Implementing  a  Corporate  Storage  Policy,"  visit  storagecentral.com/darwin  or 
call  1 .800.829.3453  today. 
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DIFFERENT 


THE  SUCCESS  OF  ANY  I.T.  OR  BUSINESS  INITIATIVE 
relies  on  our  ability  to  build  strategic  partnerships  with 
corporate  and  business  unit  management,  key  suppliers, 
vendors  and  customers.  That  success  will  only  come 
when  many  different  voices  embrace  shared  visions. 

To  get  there,  we  need  solid  strategies,  clear  prioritiza¬ 
tion,  understanding  and  buy-in— along  with  the  right 
infrastructure  and  resources  in  place.  Join  us  as  your 
CIO  peers  share  visions  on  ways  to  create  new  business 
value,  a  higher  ROI  and  more  strategic  deployment  of 
technology. 
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Nestle  USA’s  ERP  Lessons 

By  Ben  Worthen  I  62 

What  can  go  wrong  with  enter¬ 
prisewide  systems  implementations? 
Nestle  USA’s  $210  million  ERP 
project,  begun  in  1997  and  due  to  be 
complete  in  2003,  demonstrates  much 
that  can.  The  company  rushed  to  make  a 
Y2K  deadline  for  the  first  phase,  overlooking 
important  integration  steps.  The  CIO  formed 
an  implementation  team  of  50  top  business 
executives  and  10  senior  IT  people  but 
included  no  one  from  the  groups  that  would 
be  directly  affected  by  the  new  business 
processes.  Users  rebelled.  Morale  sank, 
turnover  soared  and  help  desk  calls  reached 
300  per  day.  In  June  2000,  Nestle  halted 
the  project  in  midrollout.  The  company 
regrouped,  starting  from  scratch  and 
jettisoning  a  predetermined  end  date.  It 
conducted  regular  surveys  of  user  reactions 
to  changes,  delaying  implementation  when 
feedback  indicated  the  need  for  further 
training.  Now  close  to  the  finish  line,  Nestle 
CIO  Jeri  Dunn  says  she  has  learned  a 
number  of  hard  lessons,  such  as  “no  major 
software  implementation  is  really  about 
the  software.” 


“We  didn’t  consider 
that  change  of  that 
magnitude  might 
cause  such  a  ripple. 
We  were  really  naive 
in  the  respect  that 
these  changes  had 
to  be  managed.” 

-JERI  DUNN,  CIO,  NESTLE  USA 


Security  Staffing  By  Eric  Berkman  I  74 

COMPANIES  THAT  WANT  to  manage  security  in-house  need  full-time  security  people  organized 
into  a  team,  carrying  out  a  coherent  security  program  that  sets  specific  responsibilities  and  policies. 
Unfortunately,  talent  is  extremely  scarce.  To  increase  their  chances  of  hiring  good  security  people, 
companies  should  consider  using  specialized  recruiters,  tapping  the  military  and  universities  as  good 
sources  for  candidates,  and  recruiting  from  the  security  companies  they  are  working  with.  Failing 
that,  CIOs  can  retrain  existing  IT  staff,  using  consultants  or  vendors  as  trainers,  and  send  staff  to 
certification  and  internship  programs.  Retention  is  the  next  challenge.  Smart  companies  are  meeting 
that  challenge  by  providing  their  staff  with  cutting-edge  tech  tools,  paid  training  and  conference 
attendance.  Salaries  should  be  kept  competitive,  from  $60,000  for  security  engineers  to  $180,000  for 
security  chiefs. 

Central  IT/Di  visional  IT  By  Scott  Berinato  182 

THE  TENSION  BETWEEN  parent  corporation  Marriott  and  subsidiary  Ritz-Carlton  will  feel 
familiar  to  any  CIO  who  has  experienced  the  opposing  forces  of  corporate  standardization  and  brand 
individuality.  When  a  question  arises  concerning  a  Marriott  technology  standard  or  program,  Ritz- 
Carlton  CIO  Pam  Angelucci  first  determines  how  it  will  affect  the  Ritz-Carlton  guest.  If  she  thinks  a 
technology  could  have  a  negative  guest  affect,  Angelucci  pushes  back,  as  she  has  over  high-speed 
Internet  access  and  CRM  proposals.  To  make  the  relationship  with  her  company’s  parent  successful, 
Angelucci  relies  on  education  and  communication.  She  invites  Marriott  IT  people  to  visit  Ritz-Carlton 
properties  to  experience  “the  Ritz-Carlton  way,”  hoping  that  it  will  make  it  easier  for  them  to 
understand  and  support  her  technology  decisions. 

- * - 

The  Balanced  Scorecard  By  Eric  Berkman  193 

AS  A  VALUE  INDICATOR*  the  Balanced  Scorecard  method  links  business  strategy  with  financial 
performance.  The  traditional  metric  of  financial  performance  is  balanced  by  three  more  fluid 
activities:  customer  relationships,  operational  excellence  and  the  organization’s  ability  to  learn  and 
improve.  Because  Balanced  Scorecard  requires  that  every  action  answer  to  stated  corporate  goals, 
implementing  it  within  IT  will  foster  alignment  with  the  business  and  eliminate  projects  of  little 
strategic  value.  DuPont  and  other  Scorecard  users  have  learned  four  lessons  for  success:  Prepare  the 
organization  ahead  of  time  for  the  change,  devise  the  right  metrics,  get  buy-in  at  all  levels  and  follow 
through  to  completion. 

Storage  Strategy  By  Carol  Hildebrand  I  102 

GOOD  STORAGE  MANAGEMENT  enables  strategic  systems  such  as  CRM  to  function  at 
their  peak,  and  it  can  save  a  boatload  of  money  as  a  company’s  storage  needs  expand  exponentially. 
Yet  many  companies  haven’t  built  an  enterprisewide  storage  architecture;  they  continue  to  live  with  a 
crazy  quilt  pieced  together  over  the  years.  Developing  an  architecture  requires  classifying  data  that 
has  to  be  retained  for  regulatory  reasons,  data  that  drives  business  decisions  and  business-critical 
data,  and  making  sure  the  most  mission-critical  information  resides  on  the  most  reliable  storage.  Data 
that’s  less  often  accessed  and  less  critical  can  be  allocated  to  the  cheaper  storage  media.  Companies 
should  consider  incorporating  into  their  storage  plans  one  of  the  upcoming  storage  management 
technologies,  including  storage  resource  management  (5RM),  storage  network  management  and 
storage  virtualization.  SRM  tools  monitor  storage  capacity  on  the  network  and  allocate  more  as 
needed,  drawing  on  unused  storage  capacity  elsewhere  in  the  enterprise. 
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Enterprise  Security  by  Symantec.  Networks  protected.  Threats  neutralized.  Peace  of  mind  restored. 

Today’s  new  threats  require  a  new  level  of  protection.  Symantec the  world’s  leading  security  software  company,  can  provide 
it.  Our  technology  includes  vulnerability  management,  intrusion  detection,  firewalls,  VPN,  content  filtering  and  virus  protection. 
We  offer  a  range  of  services,  from  consulting  and  education  to  fully  managed  security.  And  our  global  response  team  constantly 
monitors  and  creates  fixes  for  the  latest  threats.  Symantec  Enterprise  Security  is  a  complete  solution  that  can  keep  your 
company  running  smoothly  and  with  confidence.  For  a  free  copy  of  our  latest  White  Paper  “ Top  Management’s  Perspective  on 
Security’,'  visit  www.symantec.com/ses22  or  call  800-745-6054. 

Symantec 
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SOMEDAY 

TOMORROW. 

EVENTUALLY 

THREE  OF  THE  WORST  TIMES  TO  START  PLANNING 
YOUR  BUSINESS  CONTINUANCE. 

Business  Continuity  Solutions 

Nothing  gives  you  more  peace  of  mind  than  knowing  your 
business  is  already  prepared  to  handle  anything.  To  find  out  how 
ready  you  are  for  the  future,  take  our  Vulnerability  Assessment 
Test  today.  It's  the  quickest  way  to  put  your  mind  at  ease. 


TAKE  OUR  FREE  VULNERABILITY  ASSESSMENT  TEST  AT  CA.COM  /  FREETEST 
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